I have just installed a new version (2021.03.16) of the “LIVE555 Streaming 
Media” code that fixes the bug (a potential security vulnerability) that Zhao 
Jiaxu reported yesterday.

If your code implements a RTSP server that uses one or more of the following 
"OnDemandServerMediaSubsession” subclasses:
        AC3AudioFileServerMediaSubsession
        ADTSAudioFileServerMediaSubsession
        AMRAudioFileServerMediaSubsession
then you should upgrade to the latest version of the code ASAP.  (This includes 
the “testOnDemandRTSPServer” demo application.  Note, however, that the 
"DynamicRTSPServer" code used by the "LIVE555 Media Server" is not vulnerable 
to this bug.)


Ross Finlayson
Live Networks, Inc.
http://www.live555.com/


_______________________________________________
live-devel mailing list
live-devel@lists.live555.com
http://lists.live555.com/mailman/listinfo/live-devel

Reply via email to