Version 1.2.4 – Security Updates

Following on from the security update of 1.2.3, some further changes are introduced to make the communication path between NQPTP and Shairport Sync resistant to outside interference. On Linux, nqptp now runs as a restricted user but with special permission to access ports 319 and 320.

These changes have necessitated changing the SMI interface. The SMI interface is now at version 10, and Shairport Sync must also be updated to be compatible with it.

Before updating, it is important that you remove the startup service file as described in the README.

Please read the Release Notes for more details.

Version 1.2.3: Security Fix

This important update fixes a crashing bug whereby a maliciously-crafted message to the control port could crash NQPTP. (Supersedes 1.2.2.)

Version 1.2.1: Enhancements and Bug Fixes

• This update enables NQPTP to respond to information provided by Shairport Sync about the state of the player – whether it is playing, stopped or paused. NQPTP uses this to improve the accuracy of the timing information it provides.

• This version of NQPTP uses Shared Memory Interface Version smi9. (You can check nqptp using $ nqptp -V.)

• NQPTP will only listen to connections made to port 9000 coming from localhost. Thanks to the0u for the suggestion and the code. Thanks to herrernst for the reminder!

• A number of bugs have been fixed.

(Version 1.2.1 is Version 1.2 with a cosmetic change: the version number is reported correctly.)