CVS change done by Attila Kinali CVS Update of /cvsroot/mplayer/homepage/src In directory mail:/var2/tmp/cvs-serv4340 Modified Files: news.src.en Log Message: add 2 linebreaks Index: news.src.en =================================================================== RCS file: /cvsroot/mplayer/homepage/src/news.src.en,v retrieving revision 1.235 retrieving revision 1.236 diff -u -r1.235 -r1.236 --- news.src.en 26 Aug 2005 19:46:43 -0000 1.235 +++ news.src.en 26 Aug 2005 19:49:45 -0000 1.236 @@ -14,8 +14,10 @@ If and under which circumstances this is exploitable is unclear to us as of now. We have found a file that is supposed exploit it but could not make it work. Still we do not want to put you at risk by waiting longer to publish this. +<br> <a href="http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/main/libmpcodecs/ad_pcm.c.diff?r1=1.18&r2=1.19">Here</a> is a patch that fixes the problem. +<br> Adding "ac=-pcm," (notice the trailing ',') to the config file is a quick fix that should keep you safe as long as you don't use the -ac option on the commandline. Though you will not be able to play uncompressed audio then.