xine-lib 1-rc4 released

Hi all,

The latest version of xine-lib, 1-rc4, is now available for download.

This release includes several important bugfixes but also new features,
such as an experimental DTS decoder. Users should also experiment
improved support of DVDs, VCDs, Matroska and MMS streaming as well as
working Real server streaming on big endian platforms. Some other
noticeable changes include deinterlacer support for bottom-field-first
streams, fixing very annoying motion effects on some DVDs and MPEGs, and
On Screen Display using XVideo colorkey, that removes unwanted
flickering of OSD updates.


The Real RTSP streaming code, which was developed by xine team and
ported to MPlayer, was subject of a recent audit by developers of both
projects. The audit revealed several vulnerabilities, which have being
fixed in this release. These vulnerabilities are remotely exploitable
and could lead to execution of arbitrary code under user's privileges.
Therefore, it is highly advisable that users of all affected xine
versions, including users of the most popular front ends such as
xine-ui, Totem and Kaffeine, to upgrade to the latest version.

xine-lib 1-rc4 can be downloaded from

  http://xinehq.de/index.php/download

If you want to check integrity of the downloaded file, the MD5 sum is:

0ab4da35964044369768c90f931ce2c2  xine-lib-1-rc4.tar.gz


Full information about the RTSP vulnerabilities can be found at our
joint advisory with MPlayer, available from

  http://xinehq.de/index.php/security/XSA-2004-3

This advisory reaffirm not only our commitment to handling security
issues seriously but also the healthy cooperation with the MPlayer team.

Thanks to everybody that contributed with xine, enjoy!

Miguel


Complete changelog since 1-rc3c:

xine-lib (1-rc4)
  * experimental DTS software decoder using libdts
  * SPU decoder: timestamp handling for NAV packets fixes the menu on the first
    DVD of "24" season 1
  * improved precision in metronom's audio timestamp calculation fixes some
    sync problems, especially in long-running applications
  * fix playing mpeg vob files with LPCM
  * correct field order when deinterlacing bottom-field-first streams
  * fix network cdda playback
  * fix channel swapping in wave demuxer (lpcm)
  * colorkey support for drawing OSD (XVideo only - fix some flickering)
  * avoid possible segfaults in cdda
  * libvcd updated to 0.7.20
  * libcdio updated to 0.68
  * libmad updated to 0.15.1b
  * build improvements - different source and build directory, translations
  * avoid deadlock with raw AC3 streams and visualization
  * fix 24 bpp RGB output - may affect some users of xshm and fb
  * generate events for "Permission denied" and "File not found" in the
    http and file plugins
  * DXR3: fix menu highlight areas in letterboxed overlay mode with
    pan&scan content
  * DXR3: fix libavcodec encoder for frame widths not a multiple of 16
  * mediaLib now used for bilinear scaling
  * video_out_pgx32: properly clips video output
  * video_out_pgx64: fixed displaying frames out of order when multi-buffering,
    automatically manages overlay mode based on degree of occlusion.
  * DXR3: option to use Pan & Scan information embedded in MPEG and DVB streams
  * disable AUD content detection because of false positives
  * fix Real pnm/rtsp streaming on big endian platforms
  * big endian fix, and delay fixes for the file (wave) audio output plugin
  * RTSP security fixes
  * mmst big cleanup and fixes
  * asf codec initialization fix
  * engine improvement to handle unknown frame rate correctly
  * all config entries have help strings now
  * seeking support for matroska files
  * libmpeg2 now has native VIS motion compensation routines on SPARC
 


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click