Jump to content

Firmware release notes 4.8.0

From SpinetiX Wiki
Release name: "Stecknadelhorn" 4.8.0. Release date: September 27th, 2023.
Applies to HMP400, HMP400W, iBX410, iBX440, HMP350, HMP300, DiVA, and third-party players.
Firmware version number: 4.8.0-1.0.2-9acad3cd
Note Note:
For other versions, see the DSOS release notes page.

New

  • Added support for the new SpinetiX player models: iBX410 and iBX440.
  • Added support for having multiple, perfectly-synchronized, video outputs on supported devices (e.g., iBX440).


Applies to HMP400, HMP400W, iBX410, iBX440, and third-party players.

  • Added support for close subtitling/captioning (CC) on video files or streaming media – subtitles can now be displayed on screen in the selected language; supported formats: EIA-708 (Line 21), Teletext, DVB, DVD, Blu-ray, SSA.
  • Added support for SRT protocol for streaming sources. This is a Technology Preview Feature.


Applies to third-party players

  • Added support for Intel NUC 11 Atlas Canyon
  • Added support for Sharp/NEC SDM with Elkhart Lake CPU.
  • Added support for platforms using Intel Tiger Lake CPUs.

Improvements

  • Improved the Control Center user interface:
    • Reworked the info-boxes on the Control Center home page to include the player model, Feature Set details, serial number, player time.
    • Added the power source (PoE/USB) and power consumption info-boxes on HMP400 and HMP400W (hardware revision dependent).
    • The source of each Feature Set is now shown, it can be either DSOS or content.
    • Replaced "Power" with "Status" in the DISPLAY tab popover to avoid ambiguity.
    • A warning is shown if the player time is off with respect to the browser time.
    • The check for firmware update is now asynchronous to avoid blocking the PHP server.
    • A warning dialog is displayed instead of the configuration wizard if no license is activated on a player.
    • The name "uploader" and names starting with a period are disallowed when a user is created to avoid conflicts with internal users.
    • When manual DNS is used, the DNS suffix is checked to make sure it is a valid domain name.
    • Reworked the Output Streaming section for clarity.
    • The "Capture stream packets" option is removed on players that do not support streaming, i.e., on the HMP300 and on players that do not have a SYSTEMS license.
    • Added a "Web page data" option under the Operations ⇾ Reset section, to clear the HTML rendering engine data (HTTP cache, HTTP web storage, cookies). The "Web storage" option has been renamed to "Shared variables".
    • The display power management controls are now available on third party players.
  • The net-snmp daemon is no longer started if SNMP is not enabled; previously it was always started but listening on only localhost by default.
  • The system report now includes a decoded dump of the EDID from the screen for improved diagnostics.
  • Added capability to select a particular audio track within a video file by setting the spx:audio attribute to a language code (e.g., "ENG", "FRA", "SPA", etc.), "QAA" (for the original language), or "QAD" (for audio description).


Applies to HMP400, HMP400W, iBX410, iBX440, and third-party players

  • Updated the HTML rendering engine to CEF / Chromium 95.
  • Updated FFmpeg to version 4.4.3 for subtitles support and other improved video support.
  • Updated GStreamer to version 1.20
  • Added support for Opus audio codec.
  • Updated graphics stack to support Intel CPUs with Gen12 (Xe) GPUs.
  • The intel-media-driver hardware acceleration decoders are now used on all Intel platforms, the legacy intel-vaapi-driver decoders have been removed since no longer used.
  • The Linux kernel has been updated from version 5.4 to 5.15.
  • Support for Thunderbolt / USB 4 devices has been added.
  • The packaging of firmware files for Intel GPUs has been reworked so that only the ones necessary for the supported platforms are included in DSOS.

Fixes

Control Center:

  • Added a check to prevent restoring a configuration if the passphrase or the secret key used when it was generated does not match the one configured on the player.
  • Display power schedules with invalid on/off time configurations are now forbidden.
  • When signing in, users with content right only are redirected to the user profile page, which is the only one they can access.
  • DHCP was shown when a static address was configured.
  • Applying a license would tell that a restart was needed even if the license failed.
  • Was not using a private directory for the runtime directory.
  • The timeout used to connect to DBus was too long and could cause long interruptions if ever the DBus system malfunctioned.

Others:

  • Firmware updates could fail with an out of space error when the update included very large packages (e.g., libcef).
  • Limit number of log messages for videos that cannot be decoded.
  • Show correct bitstream header names in logs.
  • Status API - the snapshotURI now points to the correct endpoint.
  • Error message on invalid power off time contained incorrect data.


Applies to HMP400 and HMP400W.

  • The daemon that gathers data from the microcontroller would report spurious communication errors due an invalid CRC on some data patterns, this had no effect in the hardware functionality.


Applies to HMP400, HMP400W, and third-party players

  • Some of the ancillary filesystems used in DSOS could not store timestamps past 2038 due to limited inode size, and a warning was logged when mounting them; all newly created filesystems are now capable of storing timestamps past 2038.


Applies to third-party players

  • The instant messaging service was not announced on Bonjour for these players.

Security

Updated base libraries and components, the main changes are as follows.

  • apache2: updated from 2.4.56 to 2.4.57 (fixes minor issues, none security related).
  • libxml2: fixed CVE-2023-29469, which could affect DSOS and CVE-2023-28484, which did not affect DSOS.
  • freetype: fixed CVE-2023-2004, which could affect DSOS.
  • curl: fixed CVE-2023-23916, which affected DSOS, and CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536 and CVE-2023-27538, none of which affected DSOS.
  • openssl: fixed CVE-2023-0464, CVE-2023-0465 and CVE-2023-0466, which could affect DSOS.
  • ffmpeg: the update from 4.2.4 to 4.4.3 fixed the following security issues, CVE-2019-13312, CVE-2019-13390, CVE-2019-15942, CVE-2019-17542, CVE-2020-12284, CVE-2020-13904, CVE-2020-14212, CVE-2020-20446, CVE-2020-20448, CVE-2020-20450, CVE-2020-20451, CVE-2020-20453, CVE-2020-20891, CVE-2020-20892, CVE-2020-20896, CVE-2020-20898, CVE-2020-20902, CVE-2020-21041, CVE-2020-22015, CVE-2020-22016, CVE-2020-22017, CVE-2020-22019, CVE-2020-22020, CVE-2020-22021, CVE-2020-22022, CVE-2020-22023, CVE-2020-22024, CVE-2020-22025, CVE-2020-22026, CVE-2020-22027, CVE-2020-22028, CVE-2020-22029, CVE-2020-22030, CVE-2020-22031, CVE-2020-22032, CVE-2020-22034, CVE-2020-22035, CVE-2020-22036, CVE-2020-22037, CVE-2020-22038, CVE-2020-22039, CVE-2020-22040, CVE-2020-22041, CVE-2020-22042, CVE-2020-22043, CVE-2020-22044, CVE-2020-22046, CVE-2020-22048, CVE-2020-23906, CVE-2020-24020, CVE-2020-35964, CVE-2020-35965, CVE-2021-30123, CVE-2021-33815, CVE-2021-38090, CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094, CVE-2021-38114, CVE-2021-38171, CVE-2021-38171, CVE-2021-38291, CVE-2021-38291, CVE-2022-1475, CVE-2022-3109 and CVE-2022-48434.

Updated several JavaScript libraries used by the player web interface, such as: jQuery (3.6.0), Bootstrap (3.4.1), Knockout (3.5.1)

  • The update of jQuery from 3.2.1 to 3.6.0 fixed CVE-2020-11022 and CVE-2020-11023 (they didn't affect DSOS though).


Applies to HMP400, HMP400W, and third-party players

  • Linux kernel updated from 5.4.209 to 5.15.119 fixing the following security issues:
    • That affected DSOS: CVE-2020-12362, CVE-2020-12363, CVE-2020-12364, CVE-2020-36691, CVE-2021-3669, CVE-2021-3759, CVE-2021-4148, CVE-2021-4150, CVE-2021-4159, CVE-2021-20239, CVE-2021-29155, CVE-2022-1679, CVE-2022-2588, CVE-2022-3169, CVE-2022-3303, CVE-2022-3524, CVE-2022-3534, CVE-2022-3564, CVE-2022-3586, CVE-2022-3623, CVE-2022-3707, CVE-2022-4662, CVE-2022-20166, CVE-2022-20369, CVE-2022-26373, CVE-2022-41222, CVE-2022-41674, CVE-2022-42703, CVE-2022-42719, CVE-2022-42720, CVE-2022-42721, CVE-2022-42895, CVE-2022-42896, CVE-2022-45887, CVE-2022-45934, CVE-2023-0045, CVE-2023-0160, CVE-2023-0266, CVE-2023-0394, CVE-2023-0458, CVE-2023-0459, CVE-2023-0461, CVE-2023-1073, CVE-2023-1077, CVE-2023-1249, CVE-2023-1582, CVE-2023-2002, CVE-2023-2163, CVE-2023-2513, CVE-2023-2860, CVE-2023-3006, CVE-2023-3161, CVE-2023-3268, CVE-2023-3567, CVE-2023-28327 and CVE-2023-34256.
    • That did not affect DSOS: CVE-2019-15794, CVE-2019-19449, CVE-2020-16120, CVE-2020-24504, CVE-2020-27835, CVE-2020-29373, CVE-2020-29534, CVE-2020-36310, CVE-2020-36385, CVE-2021-0929, CVE-2021-4023, CVE-2021-4037, CVE-2021-4218, CVE-2021-20177, CVE-2021-32078, CVE-2021-44879, CVE-2022-0168, CVE-2022-1789, CVE-2022-2153, CVE-2022-2327, CVE-2022-2586, CVE-2022-2602, CVE-2022-2663, CVE-2022-2978, CVE-2022-2991, CVE-2022-3028, CVE-2022-3061, CVE-2022-3108, CVE-2022-3176, CVE-2022-3344, CVE-2022-3424, CVE-2022-3521, CVE-2022-3535, CVE-2022-3542, CVE-2022-3545, CVE-2022-3565, CVE-2022-3594, CVE-2022-3621, CVE-2022-3625, CVE-2022-3628, CVE-2022-3629, CVE-2022-3633, CVE-2022-3635, CVE-2022-3643, CVE-2022-3646, CVE-2022-3649, CVE-2022-4095, CVE-2022-4129, CVE-2022-4269, CVE-2022-4382, CVE-2022-4744, CVE-2022-20148, CVE-2022-20421, CVE-2022-20422, CVE-2022-23816, CVE-2022-27672, CVE-2022-29900, CVE-2022-29901, CVE-2022-34918, CVE-2022-36280, CVE-2022-39189, CVE-2022-39842, CVE-2022-40307, CVE-2022-40768, CVE-2022-41218, CVE-2022-41849, CVE-2022-41850, CVE-2022-42432, CVE-2022-43750, CVE-2022-45886, CVE-2022-45919, CVE-2022-47520, CVE-2022-47521, CVE-2022-47929, CVE-2022-47946, CVE-2023-0240, CVE-2023-0386, CVE-2023-0590, CVE-2023-0615, CVE-2023-1074, CVE-2023-1076, CVE-2023-1078, CVE-2023-1079, CVE-2023-1095, CVE-2023-1118, CVE-2023-1281, CVE-2023-1380, CVE-2023-1382, CVE-2023-1513, CVE-2023-1611, CVE-2023-1670, CVE-2023-1829, CVE-2023-1855, CVE-2023-1859, CVE-2023-1989, CVE-2023-1990, CVE-2023-2124, CVE-2023-2162, CVE-2023-2194, CVE-2023-2248, CVE-2023-2269, CVE-2023-2483, CVE-2023-2985, CVE-2023-3090, CVE-2023-3111, CVE-2023-3117, CVE-2023-3141, CVE-2023-3212, CVE-2023-3220, CVE-2023-3338, CVE-2023-3358, CVE-2023-3390, CVE-2023-3609, CVE-2023-3812, CVE-2023-20928, CVE-2023-23004, CVE-2023-23454, CVE-2023-23455, CVE-2023-23559, CVE-2023-26545, CVE-2023-26607, CVE-2023-28466, CVE-2023-30456, CVE-2023-30772, CVE-2023-31436, CVE-2023-32233, CVE-2023-32269, CVE-2023-33203, CVE-2023-33288, CVE-2023-34255, CVE-2023-35788, CVE-2023-35823, CVE-2023-35824 and CVE-2023-35828.

Developer

jSignage API

  • Improved the RSS parsing by adding the support for retrieving the default media of a media object/group, defined with the "isDefault" attribute (used by Fox News RSS feeds, for instance).
  • Replaced setInterval timer with an SVG timer in jSignage.UI.fingerTouchClass to prevent safe mode when using the fingerTouch animation within a multiscreen project. Increased the JSignage UI plugin library version to 1.1.2.

Configuration API

  • Removed the deprecated tags from the Configuration API, which are not used on models currently supported by DSOS.

RPC API

  • Modified the get_info RPC command to report the power inputs data for the HMP400/W players, when the power flag is provided.
Retrieved from "https://support.spinetix.com/w/index.php?title=Firmware_release_notes_4.8.0&oldid=19970"
We use only essential cookies for site functionality.
More information