Re: [oss-security] RE: Security issue in icecast

Jamie Strandboge <[email protected]>
Newsgroups gmane.comp.audio.icecast.devel,gmane.comp.security.oss.general
Message-ID <1323976628.3281.82.camel@localhost>
On Thu, 2011-12-15 at 20:31 +0200, [email protected] wrote:
> *snip*
> Sending this to a public mailing list might not have been the smartest idea.

I considered this a low impact vulnerability and therefore followed the
procedures for reporting to oss-security. Additionally, I looked for a
security contact at http://www.icecast.org/contact.php but could not
find one, so I sent to the list since it said this was a valid way to
submit bugs. If the issue were more severe, I would have followed a
different procedure. I apologize for the inconvenience.

> We're already aware of Moritz's finding and are working on a fix.
> 
> Expect icecast release 2.3.3 soon.

Glad to hear. Thanks!

-- 
Jamie Strandboge             | http://www.canonical.com

_______________________________________________
Icecast-dev mailing list
[email protected]
http://lists.xiph.org/mailman/listinfo/icecast-dev
signature.asc (application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=DX7j
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.