Vulnerability Reported: a Patch for MPlayer
Multimedia software MPlayer notifies of security holes in the Real demuxer code that can result in arbitrary code execution.
The three vulnerability spots in MPlayer that Felipe Andres Manzano discovered in the code, and reported in an oCert advisory, all lead to the same possibility: an attacker can exploit a heap overflow to create a specific video file that can compromise the code. This video can have the stream_read function read or write arbitrary amounts of memory, resulting in unexpected code execution that could cause process termination. The affected MPlayer versions are 1.0 RC2 and earlier. The advisory references the required patch.
Issue 234/2020
Buy this issue as a PDF
News
-
KDE Developers Are Working on a TV Interface
The developers of the KDE desktop are hard at work to create a TV interface.
-
System76 Is Developing a New Keyboard
The company behind the incredibly powerful Thelio desktop is developing a new keyboard.
-
Zorin OS 15.2 Now Available
The latest release of Zorin OS offers numerous improvements.
-
Firefox to Get an Additional Sandbox Layer
Starting with Firefox 74, the open source web browser will include the new RLBox security feature.
-
Microsoft Defender ATP is Coming to Linux
Microsoft is ramping up its efforts to fight attackers across all platforms.
-
South Korean Government Considers Move to Linux Desktop
Seoul Mulls Migrating from Windows to Linux.
-
OpenSSH Now Supports FIDO/U2F Security Keys
SSH users can now add FIDO/U2F to the list of supported multi-factor authentication tools.
-
System76 Launches New AMD Threadripper Machine
System76 has added an AMD Threadripper option for their Thelio desktop lineup.
-
LibreOffice 6.4 Released
The unofficial office suite for the Linux platform has performance in mind for users.
-
Official Evernote Client Coming to Linux
The most widely-used note-taking app is coming to Linux.