An important note to Mumble Users of TWiTCraft

[spinnibbler Profile Website]

PSA

PLEASE! Update to 1.2.5

It addresses 2 client side security threats.

Mumble-SA-2014-001 [sig] (CVE-2014-0044)
– A malformed Opus voice packet sent to a Mumble client could trigger a NULL pointer dereference or an out-of-bounds array access.

Mumble-SA-2014-002 [sig] (CVE-2014-0045)
– A malformed Opus voice packet sent to a Mumble client could trigger a heap-based buffer overflow.

Sited from here:

http://blog.mumble.info/mumble-1-2-5/#more-517


So please update!

Thanks.

[VanDerProtofsky Profile]

thank you for this!

in addition, i do recall other players previously had issues getting Mumble to load, perhaps due to a "certificate" issue. updating 1.2.5 is most likely to also fix this issue.