xine-ui 0.99.1 released / security announcements

Hi all,

and sorry for the unusual flood of messages you are receiving today via
this list!

We have gone through some security reviews and found some issues.
As one of the results, we are issuing "xine security announcements".
These help you to determine which versions of our software are affected
and what you should do as a safeguard against any possible security
attacks.

Within a few hours, we'll have an archive of these announcements available
on our site:

  http://xinehq.de/index.php/security

Another result of our steady work is the release of xine-ui 0.99.1.
As the version number suggests, this is a "quantum leap" in xine-ui's
development: The included toolkit ("xitk") has been thoroughly improved,
which should help usability, at least to some degree. You'll probably
notice the reorganized main menu (the one you get by right-clicking the
video), too.

Additionally, this release fixes some MRL related security issues
[XSA-2004-2] and several unsafely created tempfiles in the xine-check
(aka. xine-bugreport) script (which will be described in another XSA).

For the complete list of changes, see the ChangeLog below!

As usual, you can download this release from our web site:

  http://xinehq.de/index.php/releases


The complete ChangeLog for this release:

xine-ui (0.99.1) unstable; urgency=low

  * errors are also reported to console if verbose mode is ON (or
    --bug-report),
  * fix segfault with too long actions on start (like -HHHHH....),
  * lots of xine-check updates (including security fixes),
  * fix redundant keybindings reports,
  * fix unplayable streams and loop (of death) mode,
  * all supported playlist can be downloadable,
  * fix OSD stream info for the DXR3,
  * fix lirc skeleton and '%', and 100% CPU eating when lircd quit (thanks
    to Christoph Bartelmus <[email protected]>),
  * playlist meta info scanning no more disturn playback,
  * auto buttons can be limited in skinconfig (update your already
    downloaded skins),
  * change and add checkbox styles (user selectable, see xitk README),
  * fix chain-reaction crashes with help and stuff,
  * shortcuts displayed in menus,
  * fix xinerama fullscreen (again),
  * fix layering (one more time),
  * "ESC" key dismiss windows,
  * fix enqueuing and new streamtuner,
  * MooSFV an Noatun playlist formats added,
  * display offsets on OSD in mm:ss.ss format,
  * add skin caching (speedup)
  * remove all skins but xinetic,
  * implement AMP muting,
  * fix xinerama-fullscreen problems with new kwin versions,
  * fix XMB failure (fallback to standart XFont usage),
  * fix skin downloader preview blanking,
  * fix alpha artefact on when changing skins,
  * show windows in taskbar when output window is hidden,
  * fix root window and windows states,
  * Xft support in xitk (thanks to Drew 'dantealiegri' Ogle
    <[email protected]>),
  * fix a problem with special characters in OSD for some locales,
  * display offsets on OSD in mm:ss format too, SPU offset reset,
  * enhanced ASCII art frontend for using CACA (Colored AsCii Art),
  * lot of fix, as usual.

Have fun,

	Siggi


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click