From f8a8270ef3ab3f46616378ef8b12fd85d0ee4c9e Mon Sep 17 00:00:00 2001 From: Sofia Boldyreva Date: Tue, 1 Oct 2024 20:35:52 +0200 Subject: [PATCH] Import icecast-2.4.4-17 --- .gitignore | 1 + .icecast.metadata | 1 + SOURCES/.icecast.metadata | 0 ...t-cipher-list-defined-by-the-SSL-lib.patch | 96 +++++ SOURCES/icecast.init | 67 ++++ SOURCES/icecast.logrotate | 8 + SOURCES/icecast.service | 10 + SOURCES/icecast.xml | 172 ++++++++ SOURCES/status3.xsl | 12 + SPECS/icecast.spec | 374 ++++++++++++++++++ 10 files changed, 741 insertions(+) create mode 100644 .gitignore create mode 100644 .icecast.metadata create mode 100644 SOURCES/.icecast.metadata create mode 100644 SOURCES/icecast-2.4.4-Respect-a-default-cipher-list-defined-by-the-SSL-lib.patch create mode 100755 SOURCES/icecast.init create mode 100644 SOURCES/icecast.logrotate create mode 100644 SOURCES/icecast.service create mode 100644 SOURCES/icecast.xml create mode 100644 SOURCES/status3.xsl create mode 100644 SPECS/icecast.spec diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..60be3d1 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/icecast-2.4.4.tar.gz diff --git a/.icecast.metadata b/.icecast.metadata new file mode 100644 index 0000000..d8f487c --- /dev/null +++ b/.icecast.metadata @@ -0,0 +1 @@ +dc1974235e72dfa5006ab4b8bae0380a2f951a36 SOURCES/icecast-2.4.4.tar.gz diff --git a/SOURCES/.icecast.metadata b/SOURCES/.icecast.metadata new file mode 100644 index 0000000..e69de29 diff --git a/SOURCES/icecast-2.4.4-Respect-a-default-cipher-list-defined-by-the-SSL-lib.patch b/SOURCES/icecast-2.4.4-Respect-a-default-cipher-list-defined-by-the-SSL-lib.patch new file mode 100644 index 0000000..9079eed --- /dev/null +++ b/SOURCES/icecast-2.4.4-Respect-a-default-cipher-list-defined-by-the-SSL-lib.patch @@ -0,0 +1,96 @@ +From 25ba9dd91d33471d0485105ee6e5dd6d343fc8b0 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= +Date: Wed, 4 Nov 2020 11:20:19 +0100 +Subject: [PATCH] Respect a default cipher list defined by the SSL library +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Software distributions, like Fedora, set and enforce a global +cryptographic policy +(https://docs.fedoraproject.org/en-US/packaging-guidelines/CryptoPolicies/). +That enables users to control a security level from one place. + +Overriding the default cipher list in Icecast sources undermines the +goal. + +This patch removes the hard-coded cipher list from the sources. + + + +Signed-off-by: Petr Písař +--- + doc/config-file.html | 4 ++-- + src/cfgfile.c | 3 +-- + src/connection.c | 12 +++++++----- + 3 files changed, 10 insertions(+), 9 deletions(-) + +diff --git a/doc/config-file.html b/doc/config-file.html +index 4650146..4cf0fd0 100644 +--- a/doc/config-file.html ++++ b/doc/config-file.html +@@ -648,7 +648,7 @@ For example: <alias source="/foo" dest="/bar"> + This is required for HTTPS support to be enabled. Please note that the user Icecast is running as must be able to read the file. Failing to ensure this will cause a “Invalid cert file” WARN message, just as if the file wasn’t there. +
ssl-allowed-ciphers
+
This optional tag specifies the list of allowed ciphers passed on to the SSL library. +-Icecast contains a set of defaults conforming to current best practices and you should only override those, using this tag, if you know exactly what you are doing.
++Icecast respects a set of defaults coming from the SSL library and you should only override those, using this tag, if you know exactly what you are doing. + + + +@@ -738,4 +738,4 @@ These need to be valid users on the system. Icecast must be started as root for + + + +- +\ No newline at end of file ++ +diff --git a/src/cfgfile.c b/src/cfgfile.c +index a9df53c..b758fab 100644 +--- a/src/cfgfile.c ++++ b/src/cfgfile.c +@@ -59,7 +59,6 @@ + #define CONFIG_DEFAULT_GROUP NULL + #define CONFIG_MASTER_UPDATE_INTERVAL 120 + #define CONFIG_YP_URL_TIMEOUT 10 +-#define CONFIG_DEFAULT_CIPHER_LIST "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA" + + #ifndef _WIN32 + #define CONFIG_DEFAULT_BASE_DIR "/usr/local/icecast" +@@ -432,7 +431,7 @@ static void _set_defaults(ice_config_t *configuration) + configuration->master_password = NULL; + configuration->base_dir = (char *)xmlCharStrdup (CONFIG_DEFAULT_BASE_DIR); + configuration->log_dir = (char *)xmlCharStrdup (CONFIG_DEFAULT_LOG_DIR); +- configuration->cipher_list = (char *)xmlCharStrdup (CONFIG_DEFAULT_CIPHER_LIST); ++ configuration->cipher_list = NULL; + configuration->webroot_dir = (char *)xmlCharStrdup (CONFIG_DEFAULT_WEBROOT_DIR); + configuration->adminroot_dir = (char *)xmlCharStrdup (CONFIG_DEFAULT_ADMINROOT_DIR); + configuration->playlist_log = (char *)xmlCharStrdup (CONFIG_DEFAULT_PLAYLIST_LOG); +diff --git a/src/connection.c b/src/connection.c +index df85b07..8261c6f 100644 +--- a/src/connection.c ++++ b/src/connection.c +@@ -233,13 +233,15 @@ static void get_ssl_certificate (ice_config_t *config) + ICECAST_LOG_ERROR("Invalid %s - Private key does not match cert public key", config->cert_file); + break; + } +- if (SSL_CTX_set_cipher_list(ssl_ctx, config->cipher_list) <= 0) +- { +- ICECAST_LOG_WARN("Invalid cipher list: %s", config->cipher_list); +- } ++ if (config->cipher_list) ++ { ++ if (SSL_CTX_set_cipher_list(ssl_ctx, config->cipher_list) <= 0) ++ ICECAST_LOG_WARN("Invalid cipher list: %s", config->cipher_list); ++ else ++ ICECAST_LOG_INFO("SSL using ciphers %s", config->cipher_list); ++ } + ssl_ok = 1; + ICECAST_LOG_INFO("SSL certificate found at %s", config->cert_file); +- ICECAST_LOG_INFO("SSL using ciphers %s", config->cipher_list); + return; + } while (0); + ICECAST_LOG_INFO("No SSL capability on any configured ports"); +-- +2.25.4 + diff --git a/SOURCES/icecast.init b/SOURCES/icecast.init new file mode 100755 index 0000000..411f233 --- /dev/null +++ b/SOURCES/icecast.init @@ -0,0 +1,67 @@ +#!/bin/sh +# +# icecast This shell script takes care of starting and stopping +# the icecast multimedia streaming systen. +# +# chkconfig: - 85 15 +# description: icecast is a multimedia streaming daemon. It is used to \ +# relay and offer multimedia streaming content. +# processname: icecast +# pidfile: /var/run/icecast/icecast.pid +# config: /etc/icecast.xml +### BEGIN INIT INFO +# Provides: icecast +# Required-Start: $local_fs $remote_fs $network $named +# Required-Stop: $local_fs $remote_fs $network +# Short-Description: start and stop the Icecast server +# Description: The Icecast Server is a network audio streaming server +### END INIT INFO + + +# Source function library. +. /etc/rc.d/init.d/functions + +[ -x /usr/bin/icecast ] || exit 0 + +# See how we were called. +case "$1" in + start) + # Start daemon. + echo -n $"Starting icecast streaming daemon: " + daemon "/usr/bin/icecast -b -c /etc/icecast.xml > /dev/null" + RETVAL=$? + echo + [ $RETVAL -eq 0 ] && touch /var/lock/subsys/icecast + ;; + stop) + # Stop daemon. + echo -n $"Shutting down icecast streaming daemon: " + killproc icecast + RETVAL=$? + echo + [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/icecast + ;; + status) + status icecast + RETVAL=$? + ;; + restart) + $0 stop + $0 start + ;; + reload) + echo -n $"Reloading icecast: " + killproc icecast -HUP + RETVAL=$? + echo + ;; + condrestart) + [ -f /var/lock/subsys/icecast ] && restart || : + ;; + *) + echo $"Usage: $0 {start|stop|status|restart|reload}" + RETVAL=1 + ;; +esac + +exit $RETVAL diff --git a/SOURCES/icecast.logrotate b/SOURCES/icecast.logrotate new file mode 100644 index 0000000..5492404 --- /dev/null +++ b/SOURCES/icecast.logrotate @@ -0,0 +1,8 @@ +/var/log/icecast/*log { + missingok + notifempty + sharedscripts + postrotate + /bin/kill -HUP `cat /var/run/icecast/icecast.pid 2>/dev/null` 2> /dev/null || true + endscript +} diff --git a/SOURCES/icecast.service b/SOURCES/icecast.service new file mode 100644 index 0000000..de7407a --- /dev/null +++ b/SOURCES/icecast.service @@ -0,0 +1,10 @@ +[Unit] +Description=Icecast Network Audio Streaming Server +After=network.target + +[Service] +ExecStart=/usr/bin/icecast -c /etc/icecast.xml +ExecReload=/bin/kill -HUP $MAINPID + +[Install] +WantedBy=multi-user.target diff --git a/SOURCES/icecast.xml b/SOURCES/icecast.xml new file mode 100644 index 0000000..e8b7fac --- /dev/null +++ b/SOURCES/icecast.xml @@ -0,0 +1,172 @@ + + + 100 + 2 + 5 + 524288 + 30 + 15 + 10 + + 1 + + 65535 + + + + + hackme + + hackme + + + admin + hackme + + + + + + + + + localhost + + + + 8000 + 127.0.0.1 + + + + + + + + + + + + + + + + + 1 + + + + /usr/share/icecast + + + /var/log/icecast + /usr/share/icecast/web + /usr/share/icecast/admin + /var/run/icecast/icecast.pid + + + + + + + + + access.log + error.log + + 3 + 10000 + + + + + + 0 + + icecast + icecast + + + diff --git a/SOURCES/status3.xsl b/SOURCES/status3.xsl new file mode 100644 index 0000000..aac0d8d --- /dev/null +++ b/SOURCES/status3.xsl @@ -0,0 +1,12 @@ + + + +
+MountPoint,Connections,Stream Name,Current Listeners,Description,Currently Playing,Stream URL 
+Global,Client: Source: ##
+
+#######
+
+
+ + diff --git a/SPECS/icecast.spec b/SPECS/icecast.spec new file mode 100644 index 0000000..6c67dd0 --- /dev/null +++ b/SPECS/icecast.spec @@ -0,0 +1,374 @@ +# This package builds a daemon-application, +# thus we build with full hardening. +%global _hardened_build 1 + +# Systemd or SysV? +%if 0%{?fedora} || 0%{?rhel} >= 7 +%global with_systemd 1 +%endif # 0%{?fedora} || 0%{?rhel} >= 7 + +# Setup _pkgdocdir if not defined already. +%{!?_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}} + +Name: icecast +Version: 2.4.4 +Release: 17%{?dist} +Summary: ShoutCast compatible streaming media server + +# admin/xspf.xsl: GPLv2+ +# COPYING: GPLv2 text +# src/fserve.c: GPLv2 +# src/thread/thread.c: GPLv2+ +# src/avl/avl.c: BSD +# web/xml2json.xslt: BSD +## In doc package only: +# examples/icecast_auth-1.0.tar.gz: +# config.guess: GPLv2+ +# configure: FSFUL +# COPYING: GPLv2 text +# install-sh: MIT +# Makefile.in: FSFULLR +## Not in any binary package: +# config.guess: GPLv3+ +# configure: FSFUL +# doc/assets/img/Makefile.in: FSFULLR +# install-sh: MIT +License: GPLv2+ and GPLv2 and BSD +URL: http://www.%{name}.org/ +Source0: https://downloads.xiph.org/releases/%{name}/%{name}-%{version}.tar.gz +Source1: %{name}.init +Source2: %{name}.logrotate +Source3: %{name}.service +Source4: %{name}.xml +Source5: status3.xsl +# Respect a system crypto policy, bug #1645612 +Patch0: icecast-2.4.4-Respect-a-default-cipher-list-defined-by-the-SSL-lib.patch + +BuildRequires: autoconf +BuildRequires: automake +BuildRequires: coreutils +BuildRequires: findutils +BuildRequires: gcc +BuildRequires: make +BuildRequires: curl-devel >= 7.10.0 +BuildRequires: libogg-devel >= 1.0 +BuildRequires: libtheora-devel >= 1.0 +BuildRequires: libvorbis-devel >= 1.0 +BuildRequires: libxml2-devel +BuildRequires: libxslt-devel +BuildRequires: openssl-devel +BuildRequires: speex-devel + +Requires: mailcap + +Requires(pre): shadow-utils + +%if 0%{?with_systemd} +BuildRequires: systemd + +%{?systemd_requires} +%else # 0%{?with_systemd} +Requires(post): /sbin/chkconfig +Requires(preun): /sbin/chkconfig +Requires(preun): /sbin/service +Requires(postun): /sbin/service +%endif # 0%{?with_systemd} + +Provides: streaming-server + +%description +Icecast is a streaming media server which currently supports +Ogg Vorbis and MP3 audio streams. It can be used to create an +Internet radio station or a privately running jukebox and many +things in between. It is very versatile in that new formats +can be added relatively easily and supports open standards for +communication and interaction. + + +%package doc +Summary: Documentation files for %{name} +License: GPLv2+ and MIT and FSFULLR and FSFUL +BuildArch: noarch + +%description doc +This package contains the documentation files for %{name}. + + +%prep +%autosetup -p 1 +%{_bindir}/find doc/ -type f | xargs %{__chmod} 0644 +%{__cp} -a doc/ html/ +%{_bindir}/find html/ -name 'Makefile*' | xargs %{__rm} -f +autoreconf -f + + +%build +%configure \ + --with-curl \ + --enable-largefile \ + --enable-maintainer-mode \ + --with-ogg \ + --with-openssl \ + --enable-shared \ + --with-speex \ + --disable-static \ + --with-theora \ + --with-vorbis \ + --enable-yp +%make_build + + +%install +%make_install +%{__rm} -fr %{buildroot}%{_datadir}/%{name}/doc +%{__rm} -fr %{buildroot}%{_docdir}/%{name} +%if 0%{?with_systemd} +%{__install} -Dpm 0644 %{SOURCE3} %{buildroot}%{_unitdir}/%{name}.service +%else # 0%{?with_systemd} +%{__install} -Dpm 0755 %{SOURCE1} %{buildroot}%{_initrddir}/%{name} +%endif # 0%{?with_systemd} +%{__install} -Dpm 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/logrotate.d/%{name} +%{__install} -Dpm 0640 %{SOURCE4} %{buildroot}%{_sysconfdir}/%{name}.xml +%{__install} -Dpm 0644 %{SOURCE5} %{buildroot}%{_datadir}/%{name}/web/status3.xsl +%{__mkdir} -p %{buildroot}%{_localstatedir}/log/%{name} \ + %{buildroot}%{_localstatedir}/run/%{name} \ + %{buildroot}%{_pkgdocdir}/{conf,examples} +%{__cp} -a html/ AUTHORS ChangeLog COPYING NEWS TODO %{buildroot}%{_pkgdocdir} +%if 0%{?fedora} || 0%{?rhel} >= 7 +%{__rm} -f %{buildroot}%{_pkgdocdir}/COPYING +%endif # 0%{?fedora} || 0%{?rhel} >= 7 +%{__cp} -a conf/*.dist %{buildroot}%{_pkgdocdir}/conf +%{__cp} -a examples/%{name}_auth-1.0.tar.gz %{buildroot}%{_pkgdocdir}/examples + + +%pre +%{_bindir}/getent passwd %{name} >/dev/null || \ + %{_sbindir}/useradd -M -r -d /usr/share/%{name} -s /sbin/nologin \ + -c "%{name} streaming server" %{name} > /dev/null 2>&1 || : +exit 0 + + +%post +%if 0%{?with_systemd} +%systemd_post %{name}.service +%else # 0%{?with_systemd} +/sbin/chkconfig --add %{name} +%endif # 0%{?with_systemd} + + +%preun +%if 0%{?with_systemd} +%systemd_preun %{name}.service +%else # 0%{?with_systemd} +if [ $1 = 0 ]; then + /sbin/service %{name} stop >/dev/null 2>&1 + /sbin/chkconfig --del %{name} +fi +%endif # 0%{?with_systemd} + + +%postun +%if 0%{?with_systemd} +%systemd_postun_with_restart %{name}.service +%else # 0%{?with_systemd} +if [ "$1" -ge "1" ]; then + /sbin/service %{name} condrestart >/dev/null 2>&1 +fi +%endif # 0%{?with_systemd} + + +%files +%config(noreplace) %attr(-,root,%{name}) %{_sysconfdir}/%{name}.xml +%dir %attr(-,%{name},%{name}) %{_localstatedir}/log/%{name} +%doc %dir %{_pkgdocdir} +%if 0%{?fedora} || 0%{?rhel} >= 7 +%license COPYING +%else # 0%{?fedora} || 0%{?rhel} >= 7 +%doc %{_pkgdocdir}/COPYING +%endif # 0%{?fedora} || 0%{?rhel} >= 7 +%{_bindir}/%{name} +%{_datadir}/%{name} +%{_sysconfdir}/logrotate.d/%{name} +%if 0%{?with_systemd} +%{_unitdir}/%{name}.service +%else # 0%{?with_systemd} +%dir %attr(-,%{name},%{name}) %{_localstatedir}/run/%{name} +%{_initrddir}/%{name} +%endif # 0%{?with_systemd} + + +%files doc +%if 0%{?fedora} || 0%{?rhel} >= 7 +%license %{_datadir}/licenses/%{name}* +%endif # 0%{?fedora} || 0%{?rhel} >= 7 +%doc %{_pkgdocdir} + + +%changelog +* Thu Jul 18 2024 Fedora Release Engineering - 2.4.4-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild + +* Wed Jan 24 2024 Fedora Release Engineering - 2.4.4-16 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Sat Jan 20 2024 Fedora Release Engineering - 2.4.4-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Thu Jul 20 2023 Fedora Release Engineering - 2.4.4-14 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + +* Thu Jan 19 2023 Fedora Release Engineering - 2.4.4-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + +* Thu Jul 21 2022 Fedora Release Engineering - 2.4.4-12 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + +* Thu Jan 20 2022 Fedora Release Engineering - 2.4.4-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Tue Sep 14 2021 Sahana Prasad - 2.4.4-10 +- Rebuilt with OpenSSL 3.0.0 + +* Thu Jul 22 2021 Fedora Release Engineering - 2.4.4-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 2.4.4-8 +- Rebuilt for updated systemd-rpm-macros + See https://pagure.io/fesco/issue/2583. + +* Tue Jan 26 2021 Fedora Release Engineering - 2.4.4-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Wed Nov 04 2020 Petr Pisar - 2.4.4-6 +- Respect a system crypto policy (bug #1645612) + +* Tue Jul 28 2020 Fedora Release Engineering - 2.4.4-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Wed Jan 29 2020 Fedora Release Engineering - 2.4.4-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Thu Jul 25 2019 Fedora Release Engineering - 2.4.4-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Fri Feb 01 2019 Fedora Release Engineering - 2.4.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Fri Nov 02 2018 Petr Pisar - 2.4.4-1 +- 2.4.4 bump +- License declaration corrected from "GPLv2+" to "GPLv2+ and GPLv2 and BSD and + MIT and FSFULLR and FSFUL" +- Fix CVE-2018-18820 (buffer overflow in URL auth code) (#1646721) +- Regenerate build scripts + +* Fri Jul 13 2018 Fedora Release Engineering - 2.4.3-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Feb 07 2018 Fedora Release Engineering - 2.4.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Sun Jan 28 2018 Björn Esser - 2.4.3-1 +- Update to v2.4.3 (#1303784) + +* Sun Jan 28 2018 Björn Esser - 2.4.2-7 +- Add Requires: mailcap (#1519830) + +* Sun Jan 28 2018 Björn Esser - 2.4.2-6 +- Remove lots of old cruft + +* Wed Aug 02 2017 Fedora Release Engineering - 2.4.2-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 2.4.2-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Fri Feb 10 2017 Fedora Release Engineering - 2.4.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Thu Feb 04 2016 Fedora Release Engineering - 2.4.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Sat Jun 27 2015 Björn Esser - 2.4.2-1 +- update to 2.4.2 (#1236296) +- fix CVE-2015-3026 (#1210198, #1210199, #1210200) +- use %%license on Fedora 22+ + +* Wed Jun 17 2015 Fedora Release Engineering - 2.4.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Thu Dec 04 2014 Björn Esser - 2.4.1-1 +- update new to release v2.4.1 (#1101950) +- fix CVE-2014-9091 (#1168146, #1168147, #1168148, #1168149) +- fix CVE-2014-9018 (#1165880, #1165882, #1165883, #1165885) +- unified spec-file for el5+ and Fedora +- some improvements to readability +- added doc-subpkg + +* Thu Dec 04 2014 Björn Esser - 2.3.3-6 +- enabled fully hardened build (#954320) + +* Sat Aug 16 2014 Fedora Release Engineering - 2.3.3-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 2.3.3-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Sat Aug 03 2013 Fedora Release Engineering - 2.3.3-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Thu Feb 14 2013 Fedora Release Engineering - 2.3.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Sun Oct 14 2012 Andreas Thienemann - 2.3.3-1 +- Upgrade to new upstream release 2.3.3, fixing #831180, #797184, #768176 and #768175. +- Add systemd reload macro, fixing #814212. +- F18 styled systemd macros, fixing #850153. + +* Thu Jul 19 2012 Fedora Release Engineering - 2.3.2-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Feb 24 2012 Petr Pisar - 2.3.2-7 +- Remove obsolete buildroot and defattr declarations from spec file +- Move to systemd (bug #782149) +- Drop unneeded /var/run/icecast because of non-forking systemd unit + (bug #656601) + +* Fri Jan 13 2012 Fedora Release Engineering - 2.3.2-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Wed Feb 09 2011 Fedora Release Engineering - 2.3.2-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Oct 21 2009 Andreas Thienemann - 2.3.2-4 +- Added SSL support +- Added LSB header to the initscripts +- Reworked config example to contain newest changes +- Added alternative config files and authentication example + +* Fri Jul 24 2009 Fedora Release Engineering - 2.3.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Tue Feb 24 2009 Fedora Release Engineering - 2.3.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Thu Jul 31 2008 Tom "spot" Callaway 2.3.2-1 +- update to 2.3.2 +- fix license tag + +* Tue Feb 19 2008 Fedora Release Engineering - 2.3.1-5 +- Autorebuild for GCC 4.3 + +* Mon Nov 06 2006 Jindrich Novy - 2.3.1-4 +- rebuild because of the new curl + +* Fri Sep 08 2006 Andreas Thienemann - 2.3.1-3 +- FE6 Rebuild + +* Thu May 04 2006 Andreas Thienemann 2.3.1-2 +- Enabled Theora Streaming + +* Fri Feb 03 2006 Andreas Thienemann 2.3.1-1 +- Updated to icecast 2.3.1-1 + +* Wed Aug 03 2005 Andreas Thienemann 2.2.0-1 +- Initial specfile