xine - a free video player

File Release Notes and Changelog

Release Name: 1.1.15

Notes:
This release contains several security fixes; users are
strongly encouraged to upgrade. It also recognises a few
extra audio & video types and allows use of external libfaad.

Required (post-release) patches:
  http://hg.debian.org/hg/xine-lib/xine-lib/?cmd=changeset;node=c35bdd51ce1c;style=raw
    - fixes a failure when compiling C++ programs which use xine-lib
  http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=b3822572afa5;style=raw
    - fixes another C++-related failure


MD5:
42a2b4893b7f892eb334de2fc36d49c8  xine-lib-1.1.15.tar.bz2
43ba16d28291ca1cdaedf1b2f0332c79  xine-lib-1.1.15.tar

SHA1:
bcb567ea2a11c5f26b2384d5400b8466ea9048c6  xine-lib-1.1.15.tar.bz2
caa4fdeeec68edb6a4f604a5f18e280f8979f73e  xine-lib-1.1.15.tar

SHA256:
07ddf2a9f521417dd2f097534a52ddd9d2883679932f965ae7e7b0125d3c9dcc  xine-lib-1.1.15.tar.bz2
0a2284fffc6dd2a9f4115ebb15efdbf17b1e4b4fd61b4c7acd3aa7d0719ac709  xine-lib-1.1.5.tar

Changes:
* Security fixes:
  - Fix crashes with various corrupted media files, including Ogg.
    (CVE-2008-3231)
    This includes a libfaad update from the 1.2 branch.
  - Delay V4L video frame preallocation until we know how large they'll be.
  - Fix an exploitable ID3 heap buffer overflow.
  - Check for possible buffer overflow attempts in the Real demuxer.
  - Use size_t for data length variables where there may be int overflows.
  - Add some checks for memory allocation failures.
* Use external ffmpeg and libfaad by default.
* V4L: Don't segfault if asked for an input that doesn't exist.
* Recognise AMR audio (normally found in 3GP files).
* Recognise Snow video.
* Xv deinterlacing didn't take the size of the deinterlaced image into
  account; on some chipsets, this would cause image corruption, while on
  others, there would be no problem.
* V4L: only try and set the tuner if we're going to use it. Setting the tuner
  when using baseband video (CVBS, S-Video) breaks the input.
* Fix crashes with MP3 files with metadata consisting only of separators.