[icecast] URGENT: icecast 1.3.12 released

Thomas Vander Stichele thomas at urgent.rug.ac.be
Thu Apr 11 06:21:33 PDT 2002



I updated my spec file and RPM's to use the new release, if you want them 
they're available at
http://urgent.rug.ac.be/thomas/icecast/

Feedback is welcomed of course.

Thomas

> Dear Jack --
> 
> On behalf of Icecasters everywhere, thanks for the ultra-fast update!!!
> 
> I'm also now running safely as non-root, thanks to your advice.
> 
> Roy
> 
> At 05:05 PM 04/10/02 -0600, you wrote:
> >Icecast 1.3.12 fixes the current known exploit for icecast as well as
> >closing many other potential holes.
> >
> >Thanks to diz for the original report and analysis and to dave from
> >jetcafe.org for a comprehensive prophylatic patch.
> >
> >
> >Again, I warn:  DO NOT RUN ICECAST AS ROOT.  DO NOT RUN ICECAST AS A
> >PRIVELEDGED USER.
> >
> >
> >If you have been running icecast as root, there is an exploit in the
> >wild.  Please take appropriate measures to ensure you weren't affected.
> >
> >jack.
> >
> >--- >8 ----
> >List archives:  http://www.xiph.org/archives/
> >icecast project homepage: http://www.icecast.org/
> >To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
> >containing only the word 'unsubscribe' in the body.  No subject is needed.
> >Unsubscribe messages sent to the list will be ignored/filtered.
> 
> 
> --- >8 ----
> List archives:  http://www.xiph.org/archives/
> icecast project homepage: http://www.icecast.org/
> To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
> containing only the word 'unsubscribe' in the body.  No subject is needed.
> Unsubscribe messages sent to the list will be ignored/filtered.
> 


-- 

The Dave/Dina Project : future TV today ! - http://davedina.apestaart.org/
<-*-                      -*->
If you can call this luck
if you can call this love
if you can miss this much
<-*- thomas at apestaart.org -*->
URGent, the best radio on the Internet - 24/7 ! - http://urgent.rug.ac.be/

<p>--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.




More information about the Icecast mailing list