July 2004 - MPlayer-announce - lists.mplayerhq.hu

MPlayer 1.0pre5 RPMs available
by Dominik 'Rathann' Mierzejewski 26 Jul '04

26 Jul '04

Hello, everyone. RPM packages for 1.0pre5 are now available. Changes for this release include: - post-pre5 subreader fix - post-pre5 get_path memleak fix (with very last-minute segfault fix) - svgalib kernel helper support for vidix[1] As usual, please allow 1-2 days for the mirrors to catch up. [1] Grab my kernel-video-helpers RPM and rebuild it to get the necessary kernel module (from /apt/all/SRPMS.unstable/). Use the svgalib one for now, libdha is unfinished. Leech from the following mirrors: US1: http://luna.cs.ccsu.edu/dominik/ PL1: http://sunsite.icm.edu.pl/pub/linux/greysector/ PL2: http://greysector.rangers.eu.org/ -- MPlayer RPMs maintainer: http://greysector.rangers.eu.org/mplayer.html "I am Grey. I stand between the candle and the star. We are Grey. We stand between the darkness ... and the light." -- Delenn in Grey Council in Babylon 5:"Babylon Squared"

1 0

MPlayer 1.0pre5 released
by Diego Biurrun 15 Jul '04

15 Jul '04

MPlayer 1.0pre5 released: Once again after a long delay we are proud and happy to present you our latest release. Tons of new features and bug fixes were included, many during a big hacking session at LinuxTag 2004. The pending patch queue has been greatly reduced and as usual we expect to make the next release in a more timely fashion ;-) Since you already know about the name change the most important change is the security relevant string handling code audit. Read the details in the relevant advisory. If you haven't upgraded to a CVS snapshot already, upgrade to pre5 now. Highlights of this release include improved Mac OS X and Windows support, improved seeking in Real files, better MEncoder documentation with an updated DVD ripping guide, streaming related bug fixes, fullscreen bug fixes, a new unified ao_alsa ALSA audio output driver to replace ao_alsa9 and ao_alsa1x, a JACK audio output driver and new icons for the GUI and menus. Of course we also did the usual stuff like support for more codecs, new video filters and bug fixes all over the place. The codec packages have been updated and they now sport version numbers so you can easily tell whether you have the latest one or not. Grab them if you are interested in complete codec support. Have fun... MPlayer 1.0pre5: "LinuxTag release" Name * It's "MPlayer - The Movie Player" instead of "MPlayer - The Movie Player for Linux" now. Security * complete review of string operations, buffer overflows fixed DOCS * small additions, corrections, updates all over the place * audio output driver section added to the man page * several bug fixes and improvements in the MEncoder documentation * DVD ripping guide extended and improved * AUTHORS file massively extended * German man page partially updated * Hungarian XML documentation translation started Ports * encrypted DVD playback on Windows fixed (again) * Cygwin and MinGW now accept the same -dvd-device syntax * LIVE.COM now works under MinGW * foundations for MinGW crosscompilation * disabled SSE on MinGW as it caused crashes * AC3 passthrough for ao_win32 * improved vo_quartz (YUV, multiple screens support) * vo_quartz made default on Mac OS X * ao_macosx fixed and made default again on Mac OS X * RealVideo binary codecs support on Mac OS X (still buggy) * bigendian fixes in vf.c, vo_tga * OpenBSD portability fixes * OpenBSD/VAX support * AMD64 support Drivers * support for more Radeons (9800 XT among them) in VIDIX * Radeon related bug fixes in VIDIX * vo_gl2 now supports GUI, fix for flickering borders in fullscreen * support 24 and 32 bit PCM files, bigendian fixes * ao_sdl now converts unsupported formats instead of quitting * ENCA support * merged ao_alsa9 and ao_alsa1x drivers into ao_alsa * NeoMagic TV-out support through VESA * JACK audio output driver * vo_sdl fixes (wrong flags and screensaver disabling) * vo_directx fixes Decoders * MSZH/ZLIB, FLI, QTRLE, RoQ video and RoQ audio support moved to FFmpeg * FFmpeg Cinepak and CYUV decoders preferred * audio format 0xff support (is AAC) * "raw" audio in MOV supported * Indeo audio (iac25) support via binary codec * upgrade libfaad2 to the FAAD 2.0 release * MPEG2 chroma422/444 support * Winnov WINX and WNV1 support via binary codec Demuxers * Ogg subtitle handling and other bug fixes * Matroska improvements * support seeking in Real files without -idx * support seeking in Real files without index with -forceidx Streaming * ASF, MMST streaming fixes * URL escaping fixed * NSA (Nullsoft audio) streaming support * embedded RAM playlist support * multibyte URL support * rtp:// now supported even with LIVE.COM compiled in * miscellaneous bug fixes Filters * vf_softskip: frame skipping filter for MEncoder * vf_harddup: frame duplication filter for MEncoder * vf_pullup minor fixes and improvements * AltiVec-optimized YUV to RGB converter * vf_spp memory corruption fix on reallocation FFmpeg/libavcodec * MPEG2 encoding with 8, 9, 10, 11 bit intra DC precision * DC clipping fix, intra_dc_precision > 0 support * Cinepak fixes and palette support * support skipping of MB rows during decoding * Vorbis in NUT fixed * NUT updated to latest specification * segfault and artifact fixes in SVQ3 decoder * motion estimation code: overflow and chroma fixes * change qscale -> lambda for the motion estimation * noise preserving sum of squares comparison function in ME code * fixed memory overwrite in truemotion decoder * clip input motion vectors, better error tolerance on bad vectors * FLAC decoder cleanup (partial demuxer/decoder separation) * memalign hack for SSE/SSE2 on that alternative OS :) * lots of AltiVec optimizations * qscale + qprd fix * QTrle4 support * H.261 decoder * coefficient saturation fix in H.263 * H.263 MCBPC fix * per line lowpass filter in MMX and faster C lowpass filter * SVQ1 encoder * as usual, lots of bug fixes and optimizations Others * fullscreen fixes for many window managers * fix crash on original Pentiums and older * dvd://start-end support * netstream (mpst://) support fixed * support comments in plaintext playlists * loader/ dependency removed * keepaspect option extended to all video output drivers * WMA to Ogg conversion and simple subtitle editing script added to TOOLS * support for more lame options * new set of GUI icons * memory conserving implementation of GUI potmeters * X11 code reindented * further gcc 3.4 support fixes * mixer API written for changing volume through libaf * -rtc-device option for specifying the RTC device * desktop/menu icon added * miscellaneous bug fixes and cleanups * multi-threaded encoding with lavc * fixed a bug with Real files introduced in pre4 * -use-stdin renamed to -noconsolecontrols MPlayer 1.0pre5 can be downloaded from the following locations: Hungary 1 http://www1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 http://ftp1.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 Hungary 2 http://www2.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 ftp://ftp2.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 USA 1 http://ftp3.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 ftp://ftp3.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 USA 2 http://ftp5.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 ftp://ftp5.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 Switzerland http://www4.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 Australia ftp://ftp6.mplayerhq.hu/pub/mplayer/releases/MPlayer-1.0pre5.tar.bz2 Bulgaria ftp://ftp8.mplayerhq.hu/mplayer/releases/MPlayer-1.0pre5.tar.bz2 Finland http://www7.mplayerhq.hu/MPlayer/releases/MPlayer-1.0pre5.tar.bz2 MD5SUM: fbe6919eb025526e8ed129cd61a49969

1 0

Talks about Video Player Software at the Swiss Unix Conference 2004
by Attila Kinali 12 Jul '04

12 Jul '04

Hello everyone! Did you ever wanted to hear about how video players are written ? How they internaly work ? Talk with one of the leading developers of your favorite project ? Or even touch one ? Then come to the upcoming Swiss Unix Conference 2004! Here the official announcement: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SUCON'04 - 2nd Swiss Unix Conference ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 2nd Swiss Unix Conference September 2-4, 2004 Technopark, Zurich http://www.sucon.ch/ Early bird discount available until Monday, 9th August. Provisional Conference Programme ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Operating Systems: o Keynote: History of Linux - Theodore Ts'o o Documentation / CodingStyle and Beyond - Greg-KH o Linux Power Management - Patrick Mochel o NetBSD Status Report Fall 2004 - Hubert Feyrer o Old mistakes repeated (but you do get the source code now) - Poul-Henning Kamp o Resource Management in Linux using CKRM - Rik van Riel o The Linux Standard Base: Solving the Cross-Distribution Compatibility Challenge - Theodore Ts'o o The sysfs Filesystem - Patrick Mochel o udev, a way to manage /dev from userspace - Greg-KH Free Software: o Keynote: Quality Issues in Free Software Projects - Martin Michlmayr o The Legal 101 for Open Source Contributors and Users - David Rosenthal o Debian - Contributing to the Project - Martin Michlmayr o Writing Portable Multimedia Applications - Samuel Hocevar o Google in Zurich - Narayanan Shivakumar, Google Networking: o A secure BGP Implemementation - Henning Brauer o ADSL Provider Issues - Fredy Kuenzler o Application Layer Fingerprinting - Hendrik Scholz o FreeBSD Network Enhancements - Andre Oppermann o High Availability using Keepalived - Alexandre Cassen o HTB - detailed look into new QoS shaper - Martin Devera o Installing IPv6 - Peter Bieringer (Hands-On) o Linux Packet Classification Performance - Jamal Hadi Salim o Performance and Enhancement Response Team (PERT) - Chris Welti, SWITCH o PF - Extended Introduction - Max Laier o Status of IPv6 Implementations - Peter Bieringer System Management: o FreeBSD network performance tunig - Hendrik Scholz o Fully automatic Linux installations - Thomas Lange o Performance bottleneck detection and removal - Hendrik Scholz o Spamikaze - a distributed anti-spam technology - Rik van Riel o System Admin Training in the Virtual Unix Lab - Hubert Feyrer Security: o GBDE -- Spook strength disk encryption - Poul-Henning Kamp o Rule Set Based Access Control (RSBAC) - Securing Linux from the inside - Amon Ott Multimedia: o All About MPLayer - Alex Beregszaszi o Multimedia On Unix: Past, Present, and Future - Mike Melanson o Multimedia Trash And The Evolution of Full Motion Video - Mike Melanson Training Programme ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Half-Day: o How to Recover From Hard Disk Disasters - Theodore Ts'o o How to Use LDAP for User Management - Lukas Beeler Full-Day: o Contributing to Eclipse: understanding and writing plug-ins - Kai-Uwe Maetzel Exhibition ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The exhibition will take place on all days and is open for commercial and non-profit organizations. Contact office(a)sucon.ch if you are interested in exhibiting. Services ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ o Free internet access via conference network for wired and wireless clients. o Rooms open to the public for spontaneous meetings, coding sessions and discussions. o Bulletin Boards with latest programme schedules and job offers. Conference Fees ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Early Bird Registrations (Before August 9): Regular Association* Student/Unemployed 1 Day CHF 50/EUR 33 CHF 40/EUR 26 CHF 30/EUR 20 3 Days CHF 90/EUR 59 CHF 70/EUR 46 CHF 50/EUR 33 Regular Registrations (After August 9): Regular Association* Student/Unemployed 1 Day CHF 80/EUR 53 CHF 60/EUR 39 CHF 50/EUR 33 3 Days CHF 150/EUR 99 CHF 100/EUR 66 CHF 80/EUR 53 * All members of SUUG or any other national Unix User Group receive a discount. Ask your user group leaders for the authorization code. Thanks to our sponsor ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Hewlett Packard http://www.hp.com/ We are still looking for sponsors: contact office(a)sucon.ch for details. SUCON'04 Committee http://www.sucon.ch/ office(a)sucon.ch ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Greetings Attila Kinali

1 0

MPlayer 0.93 released
by Diego Biurrun 09 Jul '04

09 Jul '04

MPlayer 0.93 released: This is a security only update for our outdated stable branch. It contains a simple port of the fixes was committed to the main MPlayer source tree. This was done without a complete audit of the 0.90 branch of our code base due to a lack of resources. The 0.90 branch is long obsolete, there will be no further releases, probably not even security fix releases. Therefore we strongly recommend upgrading to MPlayer 1.0pre5 once it becomes available or a current CVS snapshot. Changelog: Security: * string operation buffer overflows fixed MPlayer 0.93 can be downloaded from the following locations: Hungary 1 http://www1.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 http://ftp1.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 Hungary 2 http://www2.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 ftp://ftp2.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 USA 1 http://ftp3.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 ftp://ftp3.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 USA 2 http://ftp5.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 ftp://ftp5.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 Switzerland http://www4.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 Australia ftp://ftp6.mplayerhq.hu/pub/mplayer/releases/MPlayer-0.93.tar.bz2 Bulgaria ftp://ftp8.mplayerhq.hu/mplayer/releases/MPlayer-0.93.tar.bz2 Finland http://www7.mplayerhq.hu/MPlayer/releases/MPlayer-0.93.tar.bz2 MD5SUM: 2ddd395cd1bc56559006398ef5105710

1 0

"all" codec package updated
by Diego Biurrun 07 Jul '04

07 Jul '04

Oops.. The all codec package was missing a few codecs that were in the essential package. This has been fixed. Diego

1 0

KPlayer 0.5.1 released
by kplayer-mph-ann＠en-directo.net 06 Jul '04

06 Jul '04

KPlayer is a KDE media player based on MPlayer. With KPlayer you can easily play a wide variety of video and audio files and streams using a rich and friendly interface that follows KDE standards. After half a year in the works, KPlayer 0.5 is finally here. The new version represents a rewrite of majority of the code base. While retaining all preexisting features, it adds powerful new stuff that will shape the future of KPlayer development. The most prominent new feature is the ability to set many options on per URL basis. Known as File Properties, this enhancement greatly improves flexibility and usability by allowing the user to fine tune KPlayer and MPlayer options for individual files and streams. Another important enhancement is the ability to play files from KDE I/O Slaves. Just as an example, you can play a file over an SSH connection without storing it locally, by using the kio_fish I/O Slave with a URL like fish://hostname/path/file. Other improvements include meta information about media files in Konqueror file manager, support for mms:, pnm: and rtsp: URLs in Konqueror browser, zooming with the mouse wheel, smooth seeking when dragging the progress slider, and a whole lot of minor improvements and bug fixes. KPlayer 0.5.1 fixes compilation problems with GCC 3.4 and Qt 3.1, as well as some minor issues. KPlayer is licensed under GPL. KPlayer 0.5.1 is available for download at http://sourceforge.net/project/showfiles.php?group_id=71710&package_id=7132… Source tarball http://prdownloads.sourceforge.net/kplayer/kplayer-0.5.1-src.tar.bz2 Debian package http://prdownloads.sourceforge.net/kplayer/kplayer_0.5.1-2_i386.deb Read me http://cvs.sourceforge.net/viewcvs.py/kplayer/kplayer/README?rev=HEAD Installation http://cvs.sourceforge.net/viewcvs.py/kplayer/kplayer/INSTALL?rev=HEAD Micro-HOWTOs http://sourceforge.net/docman/?group_id=71710 Enjoy! -- kiriuja

1 0

codec packages updated
by Diego Biurrun 06 Jul '04

06 Jul '04

Greetings! I have again updated a few codec packages (essential, all, Win32, Win32 complete). Grab them from the codecs page at http://www.mplayerhq.hu/MPlayer/releases/codecs/ The page has also undergone some modifications, it now contains information which package you need in which situation. Diego

1 0

new codec packages available
by Diego Biurrun 02 Jul '04

02 Jul '04

Greetings! I have uploaded updated codec packages to the codecs page at http://www.mplayerhq.hu/MPlayer/releases/codecs/ New additions are the QuickTime 6.3 package, a complete codec package and RealPlayer 9 codecs for Mac OS X (support for these is still buggy). The Win32 package has been updated as well as the essential and all package. If you are unsure which package to use, go for the essential package, it contains all codecs without a free alternative. All packages now feature a date string so that you can easily tell if you are using an outdated version or not. Diego

1 0

remote buffer overflow vulnerabilities in the GUI code
by Diego Biurrun 01 Jul '04

01 Jul '04

________ Summary: ~~~~~~~~ Multiple string vulnerabilities have been found and fixed in the MPlayer GUI code, at least one of which was remotely exploitable. _________ Severity: ~~~~~~~~~ High (arbitrary remote code execution under the user ID running the player) if using the GUI to play certain types of playlist files, none when using only the command line. The MPlayer GUI is optional and not built by default. _________ Solution: ~~~~~~~~~ A fix for the vulnerability with the known exploit was checked into MPlayer CVS on Wed, 2 June 2004 12:40:41 +0000 (UTC). The result of a thorough code audit that uncovered further potentially exploitable bugs was checked into MPlayer CVS on Fri, 25 June 2004 16:49:52 +0000 (UTC). All of this will be included inMPlayer 1.0pre5. Users of affected MPlayer versions should upgrade to MPlayer 1.0pre5 or a current CVS snapshot. __________________ Affected versions: ------------------ MPlayer 1.0pre4 and before MPlayer 0.92.1 and before ____________________ Unaffected versions: -------------------- none ________ History: ~~~~~~~~ On Tue, 1 June 2004 MPlayer developers were contacted by c0ntex <c0ntex(a)open-security.org> who had found a string handling vulnerability in the MPlayer GUI code complete with an example exploit and a preliminary fix. That fix was checked into MPlayer CVS on Wed, 2 June 2004 12:40:41 +0000 (UTC). When playing certain types of playlist files with extremely long entries a buffer overflow error occurs. This allows an attacker to overwrite memory with specially crafted playlist files and execute arbitrary code under the user ID running MPlayer. Richard Felker started a general audit of the GUI code for further string handling problems and uncovered a host of potential bugs, some of which were probably exploitable. Nicholas Kain proceeded to do a full audit of the MPlayer code for insecure string handling, which was finished by Alexander Strasser. The result of this audit was checked into MPlayer CVS on Fri, 25 June 2004 16:49:52 +0000 (UTC). Since the first quick review of the GUI code immediately revealed several potentially exploitable bugs we have refrained from publishing this advisory until a thorough audit of the whole code was finished. On Thu, 1 July 2004 11:22:29 (UTC) a simple port of the fixes was committed to the 0_90 stable MPlayer source tree. This was done without a further audit of the 0_90 code base due to lack of resources. We have therefore dropped further support of the 0_90 tree and recommend upgrading to MPlayer 1.0pre5 or latest CVS. _________ Download: ~~~~~~~~~ MPlayer 1.0pre5, 0.93 and CVS snapshots can be downloaded from the MPlayer homepage or one of its many mirrors. Go to the MPlayer download page at http://www.mplayerhq.hu/homepage/dload.html to get MPlayer 1.0pre5 source code or a CVS snapshot.

1 0