We are pleased to announce a new release of libigloo!
The changes include:
The fixed bug in the reference counting could result in invalid memory usage patterns. Such invalid patterns could result in security and/or stability issues. Therefore we strongly recommend to upgrade.
Download libigloo 0.9.2 from the download page.
We are pleased to announce a new release of libshout!
The changes include:
shout_set_metadata(3) with new shout_set_metadata_utf8(3)shout_set_metadata*(3) sometimes returning SHOUTERR_RETRY (#2328)SHOUTERR_RETRY with SHOUTERR_BUSY (#2316)X509_check_host(3)Download libshout 2.4.6 from the download page.
We are pleased to announce Icecast 2.5 beta3 (2.4.99.3). This is a beta release. Usage in production should be with caution.
--with-default-config=PATHHost:-header in client listerror.log
(--enable-devel-logging)<audio> for WebM/admin/publicstats replacing /status-json.xsl which is now deprecateddisplay-title to replace title, and artistOPTIONS, POST, and DELETE supportno-store to Cache-Control:-header.HTTP/1.1SOURCE as deprecatedvirtualmatch-web, nomatch-web, match-admin, nomatch-admin, match-method, and nomatch-methodenforce_auth to improve performance with URL authentication<shoutcast-compat> with <shoutcast-mount><no-mount> and renamed to <allow-direct-access><iceresponse> for admin command manageauth#738 #1272 #2057 #2085 #2225 #2332 #2335 #2336 #2342 #2343 #2347 #2348 #2355 #2356 #2358 #2359 #2363 #2366 #2369 #2370 #2373 #2377 #2385 #2396 #2398 #2408 #2409 #2413 #2421
#1902 #2017 #2084 #2365 #2372 #2395 libshout #2303
We are pleased to announce a new release of libigloo!
The changes include:
Download libigloo 0.9.1 from the download page.
We are pleased to announce a new release of libshout!
The changes include:
SHOUT_PROTOCOL_XAUDIOCAST already is).Download libshout 2.4.5 from the download page.
We are happy to announce the first public release of libigloo.
libigloo is a our new generic C framework. It should replace the code our existing projects share currently (known as “common/”) over the time. It will both provide a more uniform as well as clean, and modern interface to our shared code base.
This first release includes support for object and memory management as well as set of utility functions. More to come with next release!
Download libigloo 0.9.0 from the download page.
After quite a while without a release, we are happy to announce the release of Ices 2.0.3!
Ices is a source client for the Icecast streaming media server, it takes audio from one of the defined inputs and (re)encodes the audio for streaming.
Download Ices 2.0.3 from the Ices page.
We are pleased to announce a new release of libshout!
The changes include:
ICY port incrementDownload libshout 2.4.4 from the download page.
We are pleased to announce the next release of libshout!
The changes include:
Download libshout 2.4.3 from the download page.
We are pleased to announce the next release of libshout!
The changes include:
Download libshout 2.4.2 from the download page.
We released a new version of Icecast. It is a security release and we recommend to update all Icecast installations of versions below 2.4.4 to it.
A summary of the changes is listed below, for details please refer to the ChangeLog
The Xiph.org package repositories have been updated already. Most distributions should start shipping updated Icecast versions soon.
All issues have been also addressed in our development master branch. We plan to ship a 2.5 beta 3 in the near future.
We are pleased to announce Icecast 2.5 beta2 (2.4.99.2). This is a beta release and not recommended for production use.
<admin> tag content to YP servers - provides contact information for directory operatorsprotocol to listener client stats XMLopmode (operation mode) strict option<tls-context> with childs <tls-certificate>, <tls-key> and <tls-allowed-ciphers><shoutcast-user> tag to specify the username that is used for SHOUTcast sources<mime-types> to the <paths> section<mp3-metadata-interval> tag to <icy-metadata-interval><kartoffelsalat> tag to <event-bindings>ssl tags (<ssl>, <ssl-certificate>, <ssl-allowed-ciphers>) to tls (<tls>, <tls-certificate>, <tls-allowed-ciphers>)Expect: 100-Continue now sends the 200 status as expected at the end of transmission, not right after the 100. to it, when using Icecast on Windows (#2248)https scheme for URLs when using TLSPSA: The GPG signing key for the official Xiph.org package repositories on the openSuse Open Build Service has changed:
pub rsa2048 2017-11-21 [SC] [expires: 2020-01-30]
0E313DB7936B4E76E720065B77EC2301F23C6AA3
uid multimedia OBS Project <multimedia@build.opensuse.org>
The old key was DSA1024 and didn’t allow SHA256 signatures, only SHA1, which are being phased out right now. So to avoid future problems we approached the maintainer for the whole multimedia project to replace its signing key. This has now taken place and the multimedia:xiph subproject has rebuilt its repositories to have all of them signed by the new key.
We also host an independent copy of the public key for your convenience: https://icecast.org/multimedia-obs.key
We released a new version of Icecast last week. It is a Windows only release and addresses a security issue recently brought to our attention.
As it, embarrassingly, turns out this issue was previously raised on a security mailing list in 2005 and assigned CVE 2005-0837. A ticket (#635) was even created, once this posting was noticed by an Icecast project member, at that time. Sadly the original report was terse, the issue couldn’t be readily reproduced and subsequently the ticket was closed.
We were recently contacted about this issue and this time provided with details about the environment it occurred in. This allowed us to identify this as a Windows only issue.
The vulnerability, identified as CVE-2005-0837, allows an attacker to acces the raw XSLT template file by appending a dot “.” to the URL. Due to the way how Windows handles file names ending with a dot, it only affects Icecast versions < 2.4.3 running on Windows. Icecast on other operating systems, like Linux, wasn’t affected at any time by this issue. If you haven’t modified the default XSLT files of a Windows installation, then no information disclosure of real value could have happened. We expect that most, of the comparatively few, Windows installations have unmodified template files and thus, while technically vulnerable, only expose those unmodified templates. To be clear, no runtime information can be accessed this way.
In case you modified the templates and they contain sensitive information, it should be assumed that a third party could have accessed them. We’re sorry, that this issue went unresolved for a long time.
We’re grateful that our community quickly noticed a problem in 2.4.0 and we are releasing version 2.4.1, including additional fixes.
These fixes include:
Download libshout 2.4.1 from the download page.
We are pleased to announce the next release of libshout!
New features include:
Host:-header (vhosting support)Download libshout 2.4.0 from the download page.
We are releasing Icecast 2.4.2, an important bugfix-only release. Upgrading to it is recommended due to security fixes. A summary of the changes is listed below, for details please refer to the ChangeLog.
<on-connect> or <on-disconnect>, as there is a small chance of stream file descriptors being mixed up with script file descriptors, if the FD numbers go above 1024. This will be further addressed in the next Icecast release.<http-headers> as it will prevent processing of further <header> tags.stream_auth.We are pleased to announce Icecast 2.5 beta1 (2.4.99.1). This is a beta release and not recommended for production use. A summary of the changes is listed below, for details please refer to the ChangeLog.
<on-connect> or <on-disconnect>, as there is a small chance of stream file descriptors being mixed up with script file descriptors, if the FD numbers go above 1024. This will be further addressed in the final release.We are pleased to announce release 2.4.1 of Icecast. This is a pure bugfix-only release. Upgrading to it is recommended due to security fixes. A summary of the changes is listed below, for details please refer to the ChangeLog.
<auth> in default mounts (<mount type="default">) to work properlystatus-json.xsl), which could return invalid JSON in some casesContent-Type header for PUT requests<on-connect> or <on-disconnect>, as there is a small chance of stream file descriptors being mixed up with script file descriptors, if the FD numbers go above 1024. This will be further addressed in the next Icecast release.<http-headers> as it will prevent processing of further <header> tags.stream_auth.We are pleased to announce release 2.4.0 of Icecast. A summary of the changes is listed below, for details please refer to the ChangeLog.
<audio> element for supported audio streams./status-json.xsl) based on a xml2json template by Doeke Zanstra (see xml2json.xslt).
Output is roughly limited to data also visible through status.xsl.strftime(3)) %x codes in <dump-file>. Disabled for win32.headers and header_prefix to URL based listener auth.ip= and agent=<changeowner> is usedContent-Length header in admin (raw) requests. Thanks to paluh for reporting._parse_mount() when type-attribute is setstatus2.xsl from release. It was only a broken example file anyway.stream_auth.We are pleased to announce a fifth beta release of Icecast.
A summary of the changes is listed below, for details please
refer to the ChangeLog.
Please note that while Opus and WebM are considered production ready, there might be other problems in this release. We appreciate feedback and discussion on the icecast-dev mailing list!
We are pleased to announce a fourth beta release of Icecast.
A summary of the changes is listed below, for details please
refer to the ChangeLog.
Please note that while Opus and WebM are considered production ready, there might be other problems in this release. We appreciate feedback and discussion on the icecast-dev mailing list!
_parse_mount() when type-attribute is set.We are pleased to announce a third beta release of Icecast.
A summary of the changes is listed below, for details please
refer to the ChangeLog.
Please note that while Opus and WebM are considered production ready, there might be other problems in this release. We appreciate feedback and discussion on the icecast-dev mailing list!
We are pleased to announce a second beta release of Icecast.
A summary of the changes is listed below, for details please
refer to the ChangeLog.
Please note that while Opus and WebM are considered production ready, there might be other problems in this release. We appreciate feedback and discussion on the icecast-dev mailing list!
headers and header_prefix to URL based listener auth.listener_remove handler:
ip= and agent=int for size_t varscontent-type header, if content type is not audio/mpeg!
Can be tested using real-time encoded output and piping it into| curl -u username:password -H "Content-type: application/ogg" -T - http://localhost:8000/mountname.oggcat *.ogg will fail. Whatever feeds the pipe must do
it at proper timing for real-time playback!After far a long time the icecast development team has released Ices version 2.0.2.
Ices is a source client for Icecast streaming media server.
It takes audio from one of the defined inputs and (re)encodes the audio for streaming
to icecast for listeners to pick up.
<reconnectattempts> when set to zero (Closes: #735)<retry-initial> (Closes: #994)Download Ices 2.0.2 from the Ices page.
We are pleased to announce a beta release of Icecast. A summary of the changes is listed below.
Please note that while Opus and WebM are considered production ready, there might be other problems
in this release. We appreciate feedback and discussion on the icecast-dev mailing list!
strftime(3)) %x codes in <dump-file>. Disabled for win32.We are pleased to announce the next release of Icecast. A summary of the changes are listed below.
. (CVE-2011-4612). Injection attempts can be identified via access.log, as that stores URL encoded requests. Investigation if further logging code needs to have sanitized output is ongoing.action=stream_auth&mount=/stream&ip=IP&server=SERVER&port=8000&user=fred&pass=pass&admin=1 is added to the POST details..vcltAdded support for Opus, contributed by Greg Maxwell.
Download libshout 2.3.1 from the download page.
Added support for WebM streams, contributed by David Richards.
Download libshout 2.3.0 from the download page.
We are pleased to announce the next release of Icecast. A summary of the changes are listed below.
<charset> setting. For when source clients do not indicate which
character set is in use.charset= parameter to the metadata request./admin requests.<listen-socket> to bind to ipv4 and ipv6mount= arg to limit which stats are transformed.<logsize> in <logging> state the trigger size (in KB) for cycling the log files.<logarchive> in <logging> enable (1) if you want to use a timestamp for an extension when cycling logs.<param name="username"> and <param name="password">listener_add/remove, listener supplied username/password is used.We’ve done another round of load testing, this time going through a “large number of sources” test as well as a comparison test with Shoutcast.
All our load testing reports can be found here.
We are pleased to announce the next release of Icecast.
Downloads:
Intro files will play when a listener first connects to a stream. This is designed for station jingles and the like. If you don’t broadcast in ogg vorbis, you must make sure the bitrate/samplerate/number of channels match up to your stream.
On demand relays only connect to the relayed content when there are listeners attached to the relay. This can save bandwidth in certain cases.
With this feature, you can specify a “fallback file” which will be played in a loop and sent your currently connected listeners in the event of a source client disconnect. This means your listeners stay connected while you fix your disconnect problem. Same rules regarding bitrate/samplerate/number of channels apply as with intro files.
This delegates your listener authorization to an external application. URL calls are made on listener connect/disconnect as well as source connect/disconnect. It is meant for large broadcasters who have existing authentication systems that need to be integrated into. Included is an example php-based application that can be used in conjunction with the url authenticator to manage a simple subscription-based broadcast.
We’ve done a load test of our soon-to-be released Icecast 2.3 to hopefully answer some of the questions that have popped up recently about Icecast’s ability to work in high traffic situtations.
This report can be found here.
On the heels of version 2.1.0, we are releasing 2.2.0 with some new key features.
Icecast now supports video streaming via theora. Currently, we require the latest (alpha 4) version of libtheora. This is an optional compile, so if you don’t have theora then Icecast will safely ignore it.
Icecast now supports the connection protocol used by the Shoutcast DSP source client. This is the same connection protocol used by their NSV encoding tools. This means that not only can you use the Shoutcast DSP to stream to Icecast, but that you can also stream NSV via their tools.
Not too many source clients support streaming in this format, but we support it.
Now you can specify a cluster password as a option in the config. This will allow you to cluster multiple servers/mounts into a single listing on the stream directory. Note that this is different than “grouping” which groups together streams coming from the same physical IP and with the same stream name. Clusters are meant for relays of the same stream and will only be listed once in the stream directory. When a listener tunes into a cluster, they will be served an m3u file with all the clusters for that stream.
This is an option setting that will create an audit trail of metadata that comes through Icecast. It is a single file that contains information for all mountpoints.
We now support seeking in files served off the icecast fserve.
We now support metadata updates via the admin interface for both MP3 and Ogg Vorbis streams.
You many now indicate certains mounts to be excluded (i.e. hidden) from the main status.xsl page. This is useful when using local private relays. You can also override the YP setting (as in disable) on a per-mount basis. Also useful for local private relays.
We now have multiple config files for you to use as a base. A “simple” one for quick-start, and a more detailed “advanced” one with all the features, as well as a “shoutcast compatable” one, which shows how you’d config for using the shoutcast DSP.
You can now specify authentication used by a relay. This is for the case where you have listener authentication enabled for a mountpoint, and want to connect a relay to it.
Download Icecast 2.2.0 from the download page.
After about 8 months in development, version 2.1.0 of Icecast has been released.
Icecast now supports listener authentication. This provides a mechanism for creating/maintaining users and passwords for listeners. Currently, we only have implemented a simple, file-based storage for users and passwords. New authenticators are on the horizon (such as URL-based or possibly MySQL based) New admin pages were also added for the maintenance of users/passwords. Please check the docs for a more detailed description of this new feature.
Multi-level fallbacks allow for specifications of a series of fallback mounts that you can use to automatically move listeners in the event of a source being disconnected. In the event of new listeners attaching to the source stream that has been disconnected, they are routed to the fallback mount (if specified). Icecast now has fallback-override capability as well which means that in the event of a source stream failure, listeners are moved to the fallback mount, and then automatically recaptured when the original source stream returns.
This is an new, optional config setting which will send a initial burst of data to connecting listeners. This has the effect of reducing (significantly) the startup buffer latency from the end-user perspective. This option is enabled by default.
This interface has been cleaned up quite a bit and made a bit nicer.
The icecast yp code has received a complete overhaul by karl, and it’s a much more stable and failure-resistant implementation.
Check the ChangeLog for a complete list of these…
Download Icecast 2.1.0 from the download page.
This patch release fixes an exploit found by Luigi Auriemma. We recommend that all users currently upgrade to this patch release.
Download Icecast 2.0.2 from the download page.
This patch release fixes a overflow buffer which can cause server crashes under certain circumstances. This release contains ONLY the fix for this issue. We are still targetting a 2.1.0 release with new features and functionality in the near future.
Download Icecast 2.0.1 from the download page.
After far too long in development and testing, the icecast development team has released Ices version 2.0.0. Ices is a source client for Icecast streaming media server. It takes audio from one of the defined inputs and (re)encodes the audio for streaming to icecast for listeners to pick up.
Download Ices 2.0.0 from the Ices page.
After years in development and years in alpha testing, the Icecast development team has released version 2.0.0 of its streaming media server. Icecast2 supports Ogg Vorbis and MP3 streaming and has many features and functions you would expect from a world class streaming media server.
There are more things to come from the icecast development team, and we have many new features just waiting to be implemented.
Download 2.0.0 from the main download page.
In addition to the new release, we have re-vamped the icecast.org website to hopefully make things easier to access and to get at the information you need faster. Please let us know what you think.
Well I’ve been thinking about running a contest for a long time now, and here’s the idea: I will offer broadcasting space on my machine (which is connected on a very high speed connection) to the top 5 broadcasters from this contest. I haven’t worked out the details, but the idea is to have some period of time for which anyone can try out their djing skills, and then based on listener feedback and number of listeners, we’ll choose the top 5 (or some other number) of broadcasters and offer them space to broadcast from. So anyone out there is eligible for this - and I encourage those who don’t have the ability to broadcast now to apply! Email me at barath@icecast.org or email team@icecast.org
There’s no reason to delay this release, so icecast 1.1.4 is out the door. Read the changelog for more information.
Great news! I have just hooked up with the Green Witch folks so that I can dedicate more time to icecast as well as get it some minor funding while keeping it GPL. icecast will remain GPL and owned by the individuals who have written it. Read more at http://www.greenwitch.com/press/ice-4199.html.
There is an article in entertainment weekly about us and shoutcast :) Here’s a scanned version of the article here
Just thought I’d let everyone know that Mixmaster Mike himself is on live via icecast.
Try the 56kbps version or the 24kbps version.
Also in attendence are some other famous DJ’s…
enjoy.
SxSW was awesome. I got to meet a lot of artists and small labels, and I had some really interesting conversations with some really interesting people. The Green Witch received a lot of new content and we broadcasted a lot of it live from the floor. In other news, 1.3 is coming along quite nicely, and maybe we’ll have something out there for you to yell at us about any day now. :)
Right now Jack has finished up a day at South by Southwest in Austin, Texas. He’s there presenting with the folks from the GreenWitch who were generous in sharing booth space with us. Hopefully we’ll have some reports back from him soon.
