Skip to content

v2.8.1

Choose a tag to compare

@github-actions github-actions released this 11 Sep 07:23
· 56 commits to main since this release
TinyIce 2.8.1

Security
  - setup could be completed with an empty token after a restart
  - legacy /admin/player/* handlers enforced no per-mount access
  - CSRF via GET on every legacy admin form handler
  - /branding/logo could serve any file, including the config
  - a DJ could take over an AutoDJ/relay/transcoder mount

Fixed
  - process-ending panics from wire input (MPEG-TS pointer_field,
    MPD albumart offset), with per-connection recovery on the
    SRT/RTMP/MPD goroutines
  - a two-track WebRTC source offer crashed the server on disconnect
  - WebRTC/WHEP viewer pump spun at 100% CPU on a closed mount
  - MPD currentsong/playlistid deadlocked the AutoDJ (recursive RLock)
  - MPD password never authenticated; idle froze clients
  - audio-only HLS output died permanently after the first source drop
  - listeners hung forever on a fallback mount with both sides down;
    a fallback cycle spun at 100% CPU
  - SaveConfig raced handler map writes (fatal)
  - the player's now-playing title never updated