Processed: retitle 782120 to icecast2: icecast can be remotely killed by anyone if using and stream_auth option (CVE-2015-3026)

2015-04-08 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > retitle 782120 icecast2: icecast can be remotely killed by anyone if using > and stream_auth option (CVE-2015-3026) Bug #782120 [icecast2] icecast2: icecast can be remotely killed by anyone if using and stream_auth option Changed Bug title to

Processed: tagging 782120

2015-04-08 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 782120 + fixed-upstream upstream security Bug #782120 [icecast2] icecast2: icecast can be remotely killed by anyone if using and stream_auth option Added tag(s) upstream, security, and fixed-upstream. > thanks Stopping processing here. Ple

Bug#782120: Upstream has released a fixed version.

2015-04-08 Thread Thomas B. Rücker
We've released 2.4.2, which fixes this and should also address possible other similar issues. http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html We're currently waiting for the CVE ID from MITRE. Thanks again to Juliane for bringing this up and discussing further details with us.

Bug#779968: icecast2: Please package Icecast 2.4.1

2015-04-08 Thread Daniel James
This ticket should be for Icecast 2.4.2 now, due to the security issue https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782120 ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/

Bug#781812: [libav-devel] Bug#781812: libav

2015-04-08 Thread Anton Khirnov
Hi, Quoting Reinhard Tartler (2015-04-05 02:09:23) > Control: forwarded -1 libav-d...@lists.libav.org > > Hi Mathieu, > > I would appreciate if in future you could provide a bit more details > when reassigning bugs. The quote below was all that I had to start > working on this issue, which is ter

Bug#781812: for later reference

2015-04-08 Thread Mathieu Malaterre
tags -1 fixed-upstream c4d37cd9ef6e374bb888f6273259b10fac5bd909 ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers

Bug#782129: Support atom Xtra

2015-04-08 Thread Mathieu Malaterre
Package: mp4v2-utils Version: 2.0.0~dfsg0-3 Severity: minor Tags: upstream It would be nice to support atom Xtra. Currenly it dumps as: $ mp4info silence_xtra.m4a mp4info version -r silence_xtra.m4a: Track Type Info 1 audio MPEG-4 AAC LC, 3.707 secs, 3 kbps, 44100 Hz Reference implementation is

Bug#782125: Support atom Xtra

2015-04-08 Thread Mathieu Malaterre
Package: gpac Version: 0.5.0+svn5324~dfsg1-1+b3 Severity: minor It would be nice to support atom Xtra. Currenly it dumps as: Reference implementation is at: http://code.google.com/p/mp4v2/issues/detail?id=113 ___ pkg-multimedia-maintainers mai

Bug#782120: Upstream is aware and working on a fix

2015-04-08 Thread Thomas Ruecker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We became aware minutes after the bug was filed (Thanks Ukikie). We've discussed this with Juliane, reproduced it and are working on a fix and release. Details later today. Thomas Ruecker Icecast maintainer / Xiph.org -BEGIN PGP SIGNATURE- V