AOL’s Nullsoft division released a new version of its popular Winamp music and video player on Thursday, in part to fix a “major” security flaw in the program, according to the accompanying advisory.
Winamp 5.22 includes a huge list of stability updates and at least a couple of security tweaks, though the advisory doesn’t get too far into specifics on the latter front.
We have seen active exploitation of Winamp flaws in the past,
Winamp Remote Code Execution
Winamp exploit used to push spyware
Multiple vulnerabilities in WinAmp – Affected all versions (including 5.13)
so please do not put off downloading and installing this new version now, if you use Winamp.
