You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
TinyIce 2.8.1
Security
- setup could be completed with an empty token after a restart
- legacy /admin/player/* handlers enforced no per-mount access
- CSRF via GET on every legacy admin form handler
- /branding/logo could serve any file, including the config
- a DJ could take over an AutoDJ/relay/transcoder mount
Fixed
- process-ending panics from wire input (MPEG-TS pointer_field,
MPD albumart offset), with per-connection recovery on the
SRT/RTMP/MPD goroutines
- a two-track WebRTC source offer crashed the server on disconnect
- WebRTC/WHEP viewer pump spun at 100% CPU on a closed mount
- MPD currentsong/playlistid deadlocked the AutoDJ (recursive RLock)
- MPD password never authenticated; idle froze clients
- audio-only HLS output died permanently after the first source drop
- listeners hung forever on a fallback mount with both sides down;
a fallback cycle spun at 100% CPU
- SaveConfig raced handler map writes (fatal)
- the player's now-playing title never updated