Bug 12613

I don't have S/PDIF, but eerything is working

Whiteboard: MGA3TOO => MGA3TOO mga4-64-ok

I've updated the packages and advisory with a fix for CVE-2013-1438 (bug #11149):

Advisory:
============
Due to flaws in the embedded copy of libDCR, a fork of dcraw.c, in the embedded copy of CxImage, opening a specially crafted photo file could trigger a division by zero, an infinite loop, or a null pointer dereference, resulting in a denial of service (CVE-2013-1438).

This update fixes those flaws.

XBMC is also updated to a newer bugfix-only release, version 12.3. It contains fixes to various issues, including:
- several PVR related bugs
- memory leaks
- audio channel mapping
- possible crash on progress dialog
and more.

Additionally, this update fixes a compatibility issue on Mageia 4 affecting AC-3 transcoding, which prevented, for example, multichannel playback of AAC 5.1 files over S/PDIF or stereo-only HDMI devices.

The PVR addons have also been updated.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1438
https://bugs.mageia.org/show_bug.cgi?id=11149
http://xbmc.org/xbmc-12-3-frodo-fixes/
============

XBMC 12.3 packages are in mga3+mga4 core/updates_testing.

Source packages:
xbmc-12.3-1.1.mga3
xbmc-12.3-1.1.mga4

Binary packages:
xbmc-12.3-1.1.mga3
xbmc-eventclient-j2me-12.3-1.1.mga3
xbmc-eventclient-ps3-12.3-1.1.mga3
xbmc-eventclients-common-12.3-1.1.mga3
xbmc-eventclients-devel-12.3-1.1.mga3
xbmc-eventclient-wiiremote-12.3-1.1.mga3
xbmc-eventclient-xbmc-send-12.3-1.1.mga3
xbmc-12.3-1.1.mga4
xbmc-eventclient-j2me-12.3-1.1.mga4
xbmc-eventclient-ps3-12.3-1.1.mga4
xbmc-eventclients-common-12.3-1.1.mga4
xbmc-eventclients-devel-12.3-1.1.mga4
xbmc-eventclient-wiiremote-12.3-1.1.mga4
xbmc-eventclient-xbmc-send-12.3-1.1.mga4

Keywords: (none) => Security
Component: RPM Packages => Security
CVE: (none) => CVE-2013-1438

In VirtualBox, M4, KDE, 32-bit

Package(s) under test:
xbmc

default install of xbmc

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.2-6.mga4.i586 is already installed

Plays videos, music and add-ons work

install xbmc from updates_testing

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.3-1.1.mga4.i586 is already installed

Plays videos, music and add-ons work

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm

CC: (none) => wilcal.int
Whiteboard: MGA3TOO => MGA3TOO MGA4-32-OK

In VirtualBox, M4, KDE, 64-bit

Package(s) under test:
xbmc

default install of xbmc

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.2-6.mga4.x86_64 is already installed

Plays videos, music and add-ons work.

install xbmc from updates_testing

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.3-1.1.mga4.x86_64 is already installed

Plays videos, music and add-ons work.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm

Whiteboard: MGA3TOO MGA4-32-OK => MGA3TOO MGA4-32-OK MGA4-64-OK

Tested in M3 64.

Similar test to Bill, but on a PXE Booting NFS Root system. All seemed well.

CC: (none) => mageia
Whiteboard: MGA3TOO MGA4-32-OK MGA4-64-OK => MGA3TOO MGA4-32-OK MGA4-64-OK mga3-64-ok

In VirtualBox, M3, KDE, 32-bit

Package(s) under test:
xbmc

default install of xbmc

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.2-1.1.mga3.i586 is already installed

Plays videos, music and add-ons work.

Attempted install xbmc from updates_testing
I get the following error message:

Sorry, the following package cannot be selected:
- xbmc-12.3-1.1.mga4.i586 (due to unsatisfied libcdio.so.14)


Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm

(In reply to William Kenney from comment #6)
> In VirtualBox, M3, KDE, 32-bit
[...]
> Attempted install xbmc from updates_testing
> I get the following error message:
> 
> Sorry, the following package cannot be selected:
> - xbmc-12.3-1.1.mga4.i586 (due to unsatisfied libcdio.so.14)

You are trying to install MGA4 package on MGA3, this will not work :)

In VirtualBox, M3, KDE, 32-bit

Package(s) under test:
xbmc

default install of xbmc

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.2-1.1.mga3.i586 is already installed

Plays videos, music and add-ons work.

install xbmc from updates_testing

[root@localhost wilcal]# urpmi xbmc
Package xbmc-12.3-1.1.mga3.i586 is already installed

Plays videos, music and add-ons work.


Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm

Whiteboard: MGA3TOO MGA4-32-OK MGA4-64-OK mga3-64-ok has_procedure => MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32-OK mga3-64-ok has_procedure

Sorry, got the repo right this time.
I'm happy with this update. Lets push this update.
I get the impression xbmc is quite a bit better
now then the last time I played with it.
Thanks all.

Validating update, advisory has been uploaded. Please push to 3 & 4 core/updates.

Keywords: (none) => validated_update
Whiteboard: MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32-OK mga3-64-ok has_procedure => MGA3TOO MGA4-32-OK MGA4-64-OK MGA3-32-OK mga3-64-ok has_procedure advisory
CC: (none) => sysadmin-bugs

Update pushed:
http://advisories.mageia.org/MGASA-2014-0071.html

Status: ASSIGNED => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED