Skip to content

Version 0.11

Latest
Compare
Choose a tag to compare
@bfabiszewski bfabiszewski released this 28 May 07:32
· 10 commits to public since this release

This is mainly bug fix / security release.

  • fixed multiple buffer over-reads and null pointer dereferences that can be triggered with crafted input. The security impact of these bugs is low, they can cause crashes. These bugs were identified by extensive fuzzing by various researchers: jimoyong, dupingxin (NSFOCUS Tianji Lab), jieyongma (TDHX ICS Security), cnitlrt, beidasoft-cobot-oss-fuzz, han0nly. Some of these vulnerabilities have been assigned CVEs: CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908, CVE-2022-1987, CVE-2022-2279, CVE-2022-29788.
  • fixed potential leak in dictionary parsing on corrupt data
  • improved portability of encryption key generation
  • updated Xcode and MSVC projects