Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 21 Icecast Update: 2015-13077 Moderate DoS Threat Resolution

fedora
Calendar Grey August 19, 2015
Dist Fedora Esm H88
Crucial patch for Fedora 21's Icecast server addresses NULL pointer dereference flaw, significantly enhancing protection.
* update to 2.4.2 * fix CVE-2015-3026

Summary

Icecast is a streaming media server which currently supports

Ogg Vorbis and MP3 audio streams. It can be used to create an

Internet radio station or a privately running jukebox and many

things in between. It is very versatile in that new formats

can be added relatively easily and supports open standards for

communication and interaction.

Update Information:

* update to 2.4.2 * fix CVE-2015-3026

Change Log

* Sat Jun 27 2015 Björn Esser - 2.4.2-1 - update to 2.4.2 (#1236296) - fix CVE-2015-3026 (#1210198, #1210199, #1210200) - use %license on Fedora 22+ * Wed Jun 17 2015 Fedora Release Engineering - 2.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Thu Dec 4 2014 Björn Esser - 2.4.1-1 - update new to release v2.4.1 (#1101950) - fix CVE-2014-9091 (#1168146, #1168147, #1168148, #1168149) - fix CVE-2014-9018 (#1165880, #1165882, #1165883, #1165885) - unified spec-file for el5+ and Fedora - some improvements to readability - added doc-subpkg * Thu Dec 4 2014 Björn Esser - 2.3.3-6 - enabled fully hardened build (#954320)

References


[ 1 ] Bug #1210198 - CVE-2015-3026 icecast: NULL pointer dereference in stream_auth handler leading to DoS https://bugzilla.redhat.com/show_bug.cgi?id=1210198

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update icecast' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: icecast
Product: Fedora 21
Version: 2.4.2
Release: 1.fc21
Summary: ShoutCast compatible streaming media server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here