Hi All,
This is only problematic for users making their Pi accessible from the internet without changing the default user name and password.
There is no security update possible that will prevent people accessing your Pi if you make it accessible from the internet with the default user name and password.
Changing the default password is always the first thing to do:
passwd root
In comparison to other music player distributions, RuneAudio does not use Raspbian as operating system.
Frank