[icecast] URGENT: icecast 1.3.12 released

Jack Moffitt jack at xiph.org
Wed Apr 10 23:05:50 UTC 2002



Icecast 1.3.12 fixes the current known exploit for icecast as well as
closing many other potential holes.

Thanks to diz for the original report and analysis and to dave from
jetcafe.org for a comprehensive prophylatic patch.

<p>Again, I warn:  DO NOT RUN ICECAST AS ROOT.  DO NOT RUN ICECAST AS A
PRIVELEDGED USER.

<p>If you have been running icecast as root, there is an exploit in the
wild.  Please take appropriate measures to ensure you weren't affected.

jack.

--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.



More information about the Icecast mailing list