Processing commands for cont...@bugs.debian.org:
> retitle 782120 icecast2: icecast can be remotely killed by anyone if using
> and stream_auth option (CVE-2015-3026)
Bug #782120 [icecast2] icecast2: icecast can be remotely killed by anyone if
using and stream_auth option
Changed Bug title to
Processing commands for cont...@bugs.debian.org:
> tags 782120 + fixed-upstream upstream security
Bug #782120 [icecast2] icecast2: icecast can be remotely killed by anyone if
using and stream_auth option
Added tag(s) upstream, security, and fixed-upstream.
> thanks
Stopping processing here.
Ple
We've released 2.4.2, which fixes this and should also address possible
other similar issues.
http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html
We're currently waiting for the CVE ID from MITRE.
Thanks again to Juliane for bringing this up and discussing further
details with us.
This ticket should be for Icecast 2.4.2 now, due to the security issue
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782120
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/
Hi,
Quoting Reinhard Tartler (2015-04-05 02:09:23)
> Control: forwarded -1 libav-d...@lists.libav.org
>
> Hi Mathieu,
>
> I would appreciate if in future you could provide a bit more details
> when reassigning bugs. The quote below was all that I had to start
> working on this issue, which is ter
tags -1 fixed-upstream
c4d37cd9ef6e374bb888f6273259b10fac5bd909
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
Package: mp4v2-utils
Version: 2.0.0~dfsg0-3
Severity: minor
Tags: upstream
It would be nice to support atom Xtra. Currenly it dumps as:
$ mp4info silence_xtra.m4a
mp4info version -r
silence_xtra.m4a:
Track Type Info
1 audio MPEG-4 AAC LC, 3.707 secs, 3 kbps, 44100 Hz
Reference implementation is
Package: gpac
Version: 0.5.0+svn5324~dfsg1-1+b3
Severity: minor
It would be nice to support atom Xtra. Currenly it dumps as:
Reference implementation is at:
http://code.google.com/p/mp4v2/issues/detail?id=113
___
pkg-multimedia-maintainers mai
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
We became aware minutes after the bug was filed (Thanks Ukikie).
We've discussed this with Juliane, reproduced it and are working on a
fix and release.
Details later today.
Thomas Ruecker
Icecast maintainer / Xiph.org
-BEGIN PGP SIGNATURE-
V