[icecast] URGENT: icecast 1.3.12 released

Roy Harvey roy at lamrim.com
Thu Apr 11 08:48:10 UTC 2002



Dear Jack --

On behalf of Icecasters everywhere, thanks for the ultra-fast update!!!

I'm also now running safely as non-root, thanks to your advice.

Roy

At 05:05 PM 04/10/02 -0600, you wrote:
>Icecast 1.3.12 fixes the current known exploit for icecast as well as
>closing many other potential holes.
>
>Thanks to diz for the original report and analysis and to dave from
>jetcafe.org for a comprehensive prophylatic patch.
>
>
>Again, I warn:  DO NOT RUN ICECAST AS ROOT.  DO NOT RUN ICECAST AS A
>PRIVELEDGED USER.
>
>
>If you have been running icecast as root, there is an exploit in the
>wild.  Please take appropriate measures to ensure you weren't affected.
>
>jack.
>
>--- >8 ----
>List archives:  http://www.xiph.org/archives/
>icecast project homepage: http://www.icecast.org/
>To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
>containing only the word 'unsubscribe' in the body.  No subject is needed.
>Unsubscribe messages sent to the list will be ignored/filtered.

<p>--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.



More information about the Icecast mailing list