tocsin

Debian/icecast2: unknown

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.

Action: Upgrade icecast2 to 2.4.0-1 or later.

Affected

introducedfixedlast affected
02.4.0-1-

Fixed versions

2.4.0-1

Sources

published · modified · JSON