Skip to content

MistServer

v3.11.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 2d Media Servers
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Affected surfaces

deps

Summary

AI summary

Updated libsrt to 1.5.6 fixing a security vulnerability in versions 1.5.5 and below.

Full changelog

3.11.2 patch release notes

Hey everyone!

A bit sooner than usual, because we were notified of a security issue with libSRT of versions 1.5.5 and below. Sadly we just missed it with our previous release, but felt best considering the nature of the issue with libSRT to just make an additional release.

More information about libSRT available at their github page

We did sneak in a few new features/fixes though!

  • Improvement: Added new SRT_ACCEPT trigger, allowing you to override local SRT socket options for incoming connections
  • Improvement: Updated libsrt to 1.5.6
  • Improvement: SRT sockets now detect intentional close by the remote end as a separate exit reason than (potentially) unintential connection breaks
  • Improvement: MistServer now supports logging encryption secrets through the SSLKEYLOGFILE environment variable (a de-facto standard also supported by most browsers)
  • Bugfix: A listening port for a protocol will no longer take down active connections when restarting
  • Bugfix: No longer needlessly spam logs at INFO level when attempting to show information about streams that are offline
  • Bugfix: Prevent libsrt from locking up when it receives unexpected signals from other system components
  • Bugfix: Fixed web interface behaviour when editing a wildcard stream
  • Bugfix: Fixed web interface support for push-enabled outputs without configurable push parameters

As always, the full changelog is available as well.
Downloads are available here

Security Fixes

  • libsrt vulnerability fixed by updating to version 1.5.6 (affects versions <= 1.5.5)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track MistServer

Get notified when new releases ship.

Sign up free

About MistServer

Public domain streaming media server that works with any device and any format.

All releases →

Beta — feedback welcome: [email protected]