Starstruk Logo MarkStarstruk

25.02.6

ankitects/anki25.02.6Jun 1, 2025by dae

AI Summary

A critical security update addressing arbitrary file writing vulnerabilities via sound files.

Key Highlights

  • Security fix: Prevent arbitrary file writes via sound file references
  • Restrict audio file references to the media folder
  • Fix mpv cleanup on crash

Full Release Notes

Another security update. Windows & Linux users are strongly recommended to update.

- Specially-crafted sound file references could cause files to be written to arbitrary locations on Windows & Linux. Thanks again to Michael Lappas for his investigation.
- References to audio files outside of the media folder are no longer allowed.
- Ensure mpv is tidied up even on a crash, which should fix the mpv errors some people got when updating.

**Full Changelog**: https://github.com/ankitects/anki/compare/25.02.5...25.02.6