Jump to content

Firmware release notes 4.9.x

From SpinetiX Wiki
Note  
This article is a stub. Main article: DSOS release notes.


Release 4.9.8

Release name: "Castor" 4.9.8. Release date: June 30th, 2026.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.8-1.0.2-5d75c304

Improvements

  • Increased JavaScript engine heap size from 8 MB to 32 MB, reducing the risk out of memory failures with complex content.
  • Feature Set operations no longer fail if the player's TPM enters DA lockout mode; feature set assignment, removal and suspension are now handled more robustly.
  • Improved player enrollment behavior in SpinetiX HUB by implementing smarter retry logic, allowing faster recovery from temporary network or service errors.
  • Reduced the amount of reserved space in the root filesystem to avoid spurious firmware update failures due to lack of filesystem space.
  • Updated trusted root certificates from version 20211016 to 20260223 to ensure compatibility with services using recently introduced Certificate Authorities.
Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • HTML5 rendering engine: HTTP URLs are no longer tried as HTTPS first, ensuring web content is loaded using the exact protocol configured in the content; this was a behavior change introduced in DSOS 4.9.0 along with the Chromium update.

Fixes

  • The enable-cloud, disable-cloud, enroll-base-url, debug-enroll , and debug-iot configuration statements were not included in the player configuration backups and thus these configurations could be lost on a firmware update from DSOS 4.8.7 or earlier to DSOS 4.9.x (i.e., when the update is done via the recovery console); note that these configurations are only used in very specialized cases and thus users were rarely affected.
  • The package DB (rpm DB) space optimization introduced in DSOS 4.9.4 was not always applied before a firmware update, which could prevent firmware updates due to lack of space in the root filesystem; the dependencies have been adjusted so that the optimization is always present before starting a complete firmware update, avoiding the rpm DB from taking too much space.
  • Fixed spurious misleading TPM related error messages in the player report.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • Fixed an issue where the player could crash with some screens, when using specific custom CVT video modes and the screen's powered was being cut off. The custom video mode is now applied, even if the display's EDID is invalid.


Note  
Applies to all DSOS players, except for HMP350, HMP300, DiVA, and Bluefin Ocean.
  • The player logs incorrectly reported the display hot-plug support as enabled when it was in fact disabled.

Security

Updated base libraries and components; the main changes are as follows:

  • alsa-lib: fixed CVE-2026-25068, which did not affect DSOS.
  • apache2: updated to version 2.4.67 which fixed CVE-2026-33523, which could affect DSOS, and CVE-2026-34059, CVE-2026-34032, CVE-2026-33857, CVE-2026-33007, CVE-2026-33006, CVE-2026-29169, CVE-2026-29168, CVE-2026-28780, CVE-2026-24072 and CVE-2026-23918, none of which affected DSOS.
  • busybox: fixed CVE-2025-60876, which did not affected DSOS.
  • curl: fixed CVE-2026-3784, CVE-2026-1965 and CVE-2025-14524, all of which affected DSOS, and CVE-2026-3783, which did not affect DSOS.
  • giflib: fixed CVE-2026-23868, which affected DSOS.
  • inetutils: fixed CVE-2026-28372, which did not affect DSOS.
  • ncurses: fixed CVE-2025-69720, which did not affect DSOS.
  • raptor2: fixed CVE-2020-25713, CVE-2024-57822, CVE-2024-57823, all of which affected DSOS, and CVE-2017-18926, which did not affect DSOS.
  • sqlite3: fixed CVE-2025-70873, which did not affect DSOS.
  • tzdata: updated from version 2025b to 2026a, affecting Moldova.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • The Linux kernel has been updated from version 5.15.137 to 5.15.209 to fix "Copy Fail" and "Dirty Frag" class vulnerabilities (CVE-2026-31431, CVE-2026-43284 and CVE-2026-46300) as well as numerous other vulnerabilities.

Release 4.9.7

Release name: "Castor" 4.9.7. Release date: April 28th, 2026.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.7-1.0.2-cfbacd2d

Improvements

  • When the device certificate used by a player to authenticate with the SpinetiX HUB platform becomes invalid or otherwise unusable, the player now automatically attempts to re-enroll to obtain a new certificate; ensuring continued operations in the rare event the certificates need to be replaced.
  • The Recovery Console is updated to version 2.29.0.


Note  
Applies to all DSOS players, except for HMP350, HMP300, DiVA, and Bluefin Ocean.

Fixes

  • Fixed an issue where the rendering latency was wrongly reduced when serial port events were received, even though the interactive event processing was disabled. Both options must now be enabled to activate the interactivity boost.
  • Fixed an incompatibility with UPnP software that uses IPv6 addresses formatted in non-canonical form (e.g., using uppercase letters or not removing redundant zeroes), in which requests from such software would be rejected by the player with a 412 Precondition Failed error, an example of such software is Intel's Device Spy. This was a regression introduced in DSOS 4.9.0.
  • Fixed an issue where players could fail to receive commands from the SpinetiX HUB / ARYA when they re-enrolled at the same moment that they were starting up, requiring a reboot to recover. Note that re-enrollment at startup does not occur in normal operation, it is only used in exceptional situations, such as storage region migration.
  • Fixed an issue where ISO8601 date/time strings missing the milliseconds were not correctly parsed as Date objects.


Note  
Applies to HMP400 and HMP400W.
  • The analog audio output was no longer working on these players. This was a regression introduced in DSOS 4.9.0.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • Restoring a configuration backup on players without the SYSTEMS Feature Set could fail when using backups from older firmware versions. This also affected the firmware update from DSOS 4.8.8 and earlier since it involves a backup and a restoration of the player configuration. These backups now restored correctly.
  • Failure to load a TPM attestation key was incorrectly flagged as a FATAL error in the logs, when it is actually an expected and recoverable error after DSOS is reinstalled. This is now logged with ERROR level to reduce confusion.

Security

Updated base libraries and components; the main changes are as follows:

  • avahi: fixed CVE-2026-24401, CVE-2025-68471, CVE-2025-68468, CVE-2025-68276, all of which affected DSOS.
  • libtasn1: fixed CVE-2025-13151, which may have affected DSOS.
  • expat: fixed CVE-2026-25210, which affected DSOS, and CVE-2026-24515, which did not affect DSOS.
  • glibc: fixed CVE-2026-0915, CVE-2026-0861 and CVE-2025-15281, all of which may have affected DSOS.
  • glib-2.0: fixed CVE-2026-1489, CVE-2026-1484 and CVE-2026-0988, all of which affected DSOS, and CVE-2026-1485 which did not affect DSOS.
  • libpng: fixed CVE-2026-25646 and CVE-2026-22695, all of which affected DSOS, and CVE-2026-22801, which did not affect DSOS.
  • libxml2: fixed CVE-2026-0990 and CVE-2026-0992, which did not affect DSOS.
  • openssl: updated to version 3.0.19 which fixed CVE-2025-15467, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796, all of which affected DSOS, and CVE-2025-68160, which did not affect DSOS.

Developer

Configuration API

  • Added the <display-hotplug> configuration tag to control the display hot-plug functionality (enabled by default).

Release 4.9.6

Release name: "Castor" 4.9.6. Release date: February 25th, 2026.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.6-1.0.0-bbf996fc

Known issues

  • Updates from DSOS before 4.9.0 to 4.9.0 and later may loose the player configuration on players other than HMP350, HMP300 and DiVA if the player does not have a SYSTEMS license. One workaround is to add a SYSTEMS feature set after the update, without reconfiguring the player, and reboot; the player will automatically attempt to restore the configuration. Another workaround is to recover the pending configuration backup from the player report (the /var/cache/spxmanage/restore.cfg file), extract and edit the XML configuration file to remove the line with the underscan-supported statement and restore that amended file via Control Center.

Improvements

  • The player now supports having multiple endpoints for the MQTT servers on the SpinetiX cloud, for redundancy. SpinetiX HUB and ARYA now leverages this on newly enrolled players to attempt connections over ports 8883 and 443, where previously it could only use port 8883. The player will now attempt connections over the endpoints in round-robin fashion until one succeeds, so players in networks where port 8883 is blocked may now be able to connect to MQTT over port 443. This allows players behind restrictive firewalls to have more reactive connectivity to SpinetiX HUB and ARYA.
  • The default firmware update source URL now uses HTTPS instead of plain HTTP, with a fallback to HTTP in case the HTTPS connection cannot be established (e.g., due to missing root CA certificates for SSL inspection, old firmware with an outdated root certificate database, etc.). Note that all firmware update data is signed and its signature verified before use, independently of the transport protocol, so updates over plain HTTP are always secure even if the plain HTTP protocol is not.
  • The recovery console is updated to version 2.28.0.
  • Updated the UEFI Secure Boot forbidden signatures list (dbx) to version 2024-02-13 from UEFI and added the Microsoft 3rd party Option ROM CA 2023 certificate for maximum compatibility.

Fixes

  • The player could crash and reboot when using a remote shared variable server and the server is unavailable.
Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • Omit the guc_log_dump debug file from the sysfs section in the player reports, its data is large and confusing.

Security

Updated base libraries and components; the main changes are as follows:

Note  
Applies to all DSOS players.
  • binutils: fixed CVE-2025-1181, CVE-2025-11839, CVE-2025-11840 and CVE-2025-11494, none of which affected DSOS.
  • gnupg: CVE-2025-68973, which affected DSOS.
  • curl: fixed CVE-2025-14017, CVE-2025-15079 and CVE-2025-15224, none of which affected DSOS.
  • glib-2.0: fixed CVE-2025-14512, which may affect DSOS, and CVE-2025-14087 and CVE-2025-13601, none of which affected DSOS.
  • util-linux: fixed CVE-2025-14104, which did not affect DSOS.
  • libsoup: fixed CVE-2025-12105, which affected DSOS.
  • net-snmp: fixed CVE-2025-68615, which did not affect DSOS.
  • php: updated to version 8.1.34 which fixes CVE-2025-14177, CVE-2025-14178 and CVE-2025-14180, which may have affected DSOS.
Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • grub: fixed CVE-2025-61663 and CVE-2025-61664, which affected DSOS, and CVE-2025-61661 and CVE-2025-61662, none of which affected DSOS.

Release 4.9.5

Release name: "Castor" 4.9.5. Release date: February 3rd, 2026.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.5-1.0.0-ef0741b0

Improvements

Fixes

  • The MQTT daemon could become stuck in case of broker failures on the cloud; the daemon now implements an acknowledge timeout and recovery mechanism for such cases.
  • The timestamp in the Pull Mode's optional publish action feedback report was always 0 (unix epoch time); it now reflects the correct time.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • The player could crash if a display was reported as connected by the graphics driver but no EDID was available.


Security

Updated base libraries and components; the main changes are as follows:

Note  
Applies to all DSOS players.
  • openssh: fix CVE-2025-61984 and CVE-2025-61985, which affected DSOS.
  • libpng: fix CVE-2025-66293, CVE-2025-65018, CVE-2025-64720, CVE-2025-64506 and CVE-2025-64505, all of which affected DSOS.
  • gnutls: fixed CVE-2025-9820, which did not affect DSOS.
  • libxml2: fixed CVE-2025-7425, which did not affect DSOS.
  • elfutils: fixed CVE-2025-1377 and CVE-2025-1376, which did not affect DSOS.
  • binutils: fixed CVE-2025-11413 and CVE-2025-11412, which did not affect DSOS.


Note  
Applies to HMP400W, iBX410W, and third-party DSOS players with Wi-Fi support.
  • wpa-supplicant: fixed CVE-2025-24912, which did not affect DSOS.


Note  
Applies to DIVA, HMP300, HMP350.
  • u-boot: fixed CVE-2024-42040, which did not affect DSOS.


Release 4.9.4

Release name: "Castor" 4.9.4. Release date: December 16th, 2025.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.4-1.0.1-8f810071

New

Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.

Improvements

  • Improved the handling of errors when restoring a configuration backup after a firmware update via the Recovery mode (e.g., from 4.8.x to 4.9.x); if the configuration backup cannot be restored, it is attempted again on the next reboot if the player is not yet configured and the failed configuration backup is also included in the player report to allow for manual recovery; all secrets in the configuration backup are encrypted and thus not readable from the report.
  • The Recovery Console is updated to version 2.26.1.
Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • Added a warning "HTML5 media playback requires KIOSK/SYSTEMS Feature Set" in the player.log when web content is included in a project of type "WIDGETS". This also apply for the Power BI widget, as the dashboard/report is loaded through a web page.

Fixes

  • Fix a player crash that could occur with web content, due to a race condition in the HTML5 engine based on Chromium, which may occur when rendering certain dynamic web pages running background tasks.
  • Configuration backups can have a video mode with a vertical refresh value of 0 (meaning default), but these were rejected when restoring them; the 0 value is now accepted for compatibility. This problem could cause the loss of configuration when updating the firmware from DSOS 4.8.7 or earlier to 4.9.x releases.
  • Suboptimal usage of storage space could cause transient errors when upgrading the firmware from one 4.9.x to a later 4.9.x version.
  • URLs with the $ character where incorrectly rejected as invalid in Control Center's saved passwords page.
  • Fix error decoding 8K AV1 video that was caused by incorrect frame flag parsing and ffmpeg open-GOP bug.
  • Fixed a crash in the software video decoder on iBX440 (AVX2 path) that could occur when playback fell back from hardware to software decoding.
  • The IoT daemon did not correctly send the disconnected message to the SpinetiX HUB when shutting down or switching data residency regions, as a consequence the SpinetiX HUB could have stale information about a player.

Security

Note  
Applies to all DSOS players.

Updated base libraries and components; the main changes are as follows:

  • glib-networking: fixed CVE-2025-60019 and CVE-2025-60018, both of which affected DSOS.
  • openssl: fixed CVE-2025-9230 and CVE-2025-9232, none of which affected DSOS.
  • busybox: fixed CVE-2025-46394, which did not affect DSOS.
  • libxml2: fixed CVE-2025-9714, which did not affect DSOS.
  • curl: fixed CVE-2025-9086, which could affect DSOS.
  • jq: fixed CVE-2025-9403, which could affect DSOS.
  • apache2: updated from 2.4.65 to 2.4.66, fixing CVE-2025-65082, which could affect DSOS, and CVE-2025-66200, CVE-2025-59775, CVE-2025-58098 and CVE-2025-55753, none of which affected DSOS.
Note  
Applies to all DSOS players, except DIVA, HMP300, HMP350.

Updated base libraries and components; the main changes are as follows:

  • gstreamer1.0-plugins-bad: fixed CVE-2025-3887, which could affect DSOS.
  • lz4: fixed CVE-2025-62813, which could affect DSOS.
  • binutils: fixed CVE-2025-8225, CVE-2025-11081, CVE-2025-11083 and CVE-2025-11082, none of which affected DSOS.
  • grub2: fixed CVE-2024-56738, which could affect DSOS.
  • hostapd: fixed CVE-2022-37660 and CVE-2025-24912, none of which affected DSOS.

Release 4.9.3

Release name: "Castor" 4.9.3. Release date: November 18th, 2025.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.3-1.0.2-88aaa7f1

Improvements

  • Improved the display of splash screens during firmware updates to reduce user confusion that may have occurred when updating from versions earlier than 4.9.0, where users might have seen a starting splash screen while the player was actually completing a firmware update.

Fixes

Note  
Applies to iBX players.
  • Perfect Sync was not enabled with projects that contain document layers.
  • Under some circumstances, the firmware update process could fail with a "needs more space on the / filesystem" error.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • Sometimes the splash screen changes failed to show on screen when shutting down or initiating a firmware update, and displayed "starting" instead of the intended message.

Security

Note  
Applies to all DSOS players.

Updated base libraries and components; the main changes are as follows:

  • glib-2.0: fixed CVE-2025-7039, which could affect DSOS.
  • libarchive: fixed CVE-2025-5918, which did not affect DSOS.
  • mosquito: fixed CVE-2023-28366, which did not affect DSOS.
  • php: fixed CVE-2025-1861, CVE-2025-1219, CVE-2025-1217, CVE-2025-1734, CVE-2025-1736 and CVE-2025-1220 which affected DSOS, and fixed CVE-2025-6491 and CVE-2025-1735, none of which affected DSOS.


Note  
Applies to all DSOS players, except DIVA, HMP300, HMP350.

Updated base libraries and components; the main changes are as follows:

  • gstreamer1.0-plugins-base: fixed CVE-2025-47807, CVE-2025-47806 and CVE-2025-47808, none of which affected DSOS.
  • gstreamer1.0-plugins-good: fixed CVE-2025-47183 and CVE-2025-47219, which affected DSOS.
  • wpa-supplicant: fixed CVE-2022-37660, which did not affect DSOS.

Release 4.9.2

Release name: "Castor" 4.9.2. Release date: October 3rd, 2025.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.2-1.0.0-f0dd89a0

Improvements

  • Updated the license texts on the “About” page of Control Center to match the currently shipped software.
  • The Recovery Console is updated to version 2.24.0.

Fixes

Note  
Applies to all DSOS players.
  • Restoring some configuration files resulted in a "Some error occurred: Internal Server Error" error; as a result, some upgrades from DSOS 4.8.x and earlier versions could lose the player configuration.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • The player could crash on content reloads or display power management events when web layers were being used.

Security

Note  
Applies to all DSOS players.

Updated base libraries and components; the main changes are as follows:

  • tzdata: updated from 2024b to 2025b, affecting Paraguay and Chile
  • apache2: updated from 2.4.62 to 2.4.65, fixing CVE-2024-42516, CVE-2024-47252 and CVE-2025-54090, all of which could affect DSOS, and CVE-2024-43394, CVE-2024-43204, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, none of which affected DSOS.
  • sqlite3: fixed CVE-2025-7458, CVE-2025-6965, all of which could affect DSOS, and CVE-2025-29088 which did not affect DSOS.
  • avahi: fixed CVE-2024-52615, which did not affect DSOS.
  • binutils: fixed CVE-2025-7545, CVE-2025-7546, CVE-2025-5244, CVE-2025-5245, CVE-2025-1182, CVE-2025-1180, CVE-2025-1182, CVE-2025-1178, CVE-2025-0840, none of which affected DSOS.
  • libxml2: fixed CVE-2025-49794, CVE-2025-49796, CVE-2025-6021, CVE-2025-27113 and CVE-2022-49043, all of which could affect DSOS, and CVE-2025-6170, CVE-2025-32415, CVE-2025-32414, CVE-2025-24928 and CVE-2024-56171, none of which affected DSOS.
  • ncurses: fixed CVE-2025-6141, which did not affect DSOS.
  • gnupg: fixed CVE-2025-30258, which did not affect DSOS.
  • iputils: fixed CVE-2025-48964 and CVE-2025-47268, none of which affected DSOS.
  • openssl: upgraded from 3.0.16 to 3.0.17 and fixed CVE-2024-41996, which could affect DSOS.
  • coreutils: fixed CVE-2025-5278, which did not affect DSOS.
  • curl: fixed CVE-2025-0167 and CVE-2024-11053, none of which affected DSOS.
  • libsoup-2.4: fixed CVE-2025-4476, CVE-2025-46421, CVE-2025-2784, CVE-2025-32912, CVE-2025-32911, CVE-2025-32913, CVE-2025-32910, CVE-2025-46420 and CVE-2025-32909, none of which affected DSOS, and CVE-2025-4945, CVE-2025-4948, CVE-2025-32907, CVE-2025-4969, CVE-2025-32053, CVE-2025-32052, CVE-2025-32050, CVE-2025-32914, CVE-2025-32906 and CVE-2024-52532, which affected DSOS.
  • net-tools: fixed CVE-2025-46836, which did not affect DSOS.
  • glibc: fixed CVE-2025-8058, which could affect DSOS, and CVE-2025-4802, which did not affect DSOS.
  • glib-2.0: fixed CVE-2025-4373 and CVE-2025-3360, all of which could affect DSOS.
  • openssh: fixed CVE-2025-32728 and CVE-2025-26465, none of which affected DSOS.
  • busybox: fixed CVE-2023-39810, which did not affect DSOS.
  • freetype: fixed CVE-2025-27363, which affected DSOS.
  • zlib: fixed CVE-2014-9485, which did not affect DSOS.
  • libtasn1: updated from 4.19.0 to 4.20.0, fixing CVE-2024-12133, which affected DSOS.
  • libcap: fixed CVE-2025-1390, which did not affect DSOS.
  • gnutls: fixed CVE-2024-12243, CVE-2025-6395, CVE-2025-32988, and CVE-2025-32989, all of which affected DSOS, and CVE-2025-32990, which did not affect DSOS.
  • jq: fixed CVE-2024-23337, CVE-2024-53427, CVE-2025-48060, all of which affected DSOS.


Note  
Applies to all DSOS players, except DIVA, HMP300, HMP350.

Updated base libraries and components; the main changes are as follows:

  • intel-microcode: updated from version 20250211 to 20250812, fixing CVE-2025-20109, CVE-2025-22839, CVE-2025-22840, CVE-2025-22889, CVE-2025-24305, CVE-2025-32086, CVE-2025-21090, CVE-2024-28956 and CVE-2025-24495.
  • grub2: fixed CVE-2025-0690 and CVE-2024-45775, all of which could affect DSOS, and CVE-2025-1118, CVE-2024-45774, CVE-2024-45776, CVE-2024-45777, CVE-2024-45778, CVE-2024-45779, CVE-2024-45780, CVE-2024-45781, CVE-2024-45782, CVE-2024-56737, CVE-2024-45783, none of which affected DSOS.
  • gstreamer1.0-rtsp-server: fixed CVE-2024-44331, which affected DSOS.

Release 4.9.1

Release name: "Castor" 4.9.1. Release date: July 8th, 2025.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.1-1.0.0-e34175f1

Fixes

Note  
Applies to all DSOS players.
  • Custom HTTP headers were not passed to the HTTP request when the data source was CSV.


Note  
Applies to iBX440 players.
  • Combined multi-screen and multi-output projects would not show correctly on all players.

Known issue

  • Updating from DSOS 4.7.0 or earlier will update to DSOS version 4.8.7-3.0, so you need to run the firmware update a second time to update to DSOS version 4.9.1.


Release 4.9.0

Release name: "Castor" 4.9.0. Release date: June 5th, 2025.
Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 4.9.0-1.0.0-a2f0886e

New

Note  
Applies to all DSOS players.
  • Support for obtaining PDF versions of Word, Excel, and PowerPoint files stored on SharePoint and OneDrive, allowing the display of such files on the player.


Note  
Applies to iBX410, iBX410W, and iBX440 players.
  • Support for perfect display synchronization between multiple players, automatically activated when running a multiscreen project.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.


Note  
Applies to iBX440 players.

Improvements

Note  
Applies to all DSOS players.
  • Improved support for files on SharePoint and OneDrive by obtaining direct URLs, instead of redirect ones, which reduces display latency and supports partial downloads.
  • Support for new Unicode CLDR date formatting fields: w (week of year), W (week of month), Y (year in "Week of Year" based calendars), D (day of year).
  • The network IP configuration is no longer reinitialized when the network connectivity is recovered after an interruption if the configuration is static; before the static IP address was briefly removed and reinstated, but that could break some existing TCP connections.
  • Changed the placeholder URL for jSignage libraries from http to https to avoid false positives from security scanners; the URL is only a placeholder as the libraries are local to Elementi and DSOS.


Operating System
Updated the base Linux distribution to Yocto 4.0 Kirkstone, the major components updated are the following:

  • avahi from 0.7 to 0.8
  • libcurl from 7.69.1 to 7.82
  • replaced dhcp-client 4.4.2 by dhcpcd 9.4.1
  • glibc from 2.31 to 2.35
  • grub from 2.04 to 2.06
  • libmosquitto from 1.6.10 to 2.0.20
  • linux-firmware from 20240220 to 20240909
  • openssl from 1.1.1w to 3.0.16
  • php from 7.4.33 to 8.1.31
  • zstd (new) version 1.5.2


Control Center

  • The currently used video mode is now shown in the display page.
  • Integrated the username and password fields with browser password managers.
  • It is now possible to configure 2 stop bits for the serial port.
  • Usage of the new "Feature Set" terminology, which replaces "DSOS license".
  • The option to disable authentication is now deprecated and will be removed in the next major firmware release.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.
  • Updated the HTML rendering engine to CEF / Chromium 126.
  • Updated FFmpeg to version 5.1 for improved HDR video support.
  • Support for subtitles encoded directly in the video stream.
  • Updated the 2D graphics rendering engine to Skia 119.
  • Rate limit the spx.display.webrtc messages as they could fill the logs.

Fixes

Note  
Applies to all DSOS players.
  • Audio in the background audio playlist would continue to play when the screen is powered off, even if the audio power save option is enabled.
  • Using a server certificate with only subject alternative names (SAN) would have misconfigured the redirects on the embedded web server.
  • In the exceptional situation that a player started with no network connected and its internal clock was well in the past (several hours or more), the player could hang when network connectivity was resumed due to stepping of the local clock to the NTP reference time after startup. In such cases, the player will no longer freeze, but will instead save the new time and reboot to start afresh with a synchronized clock.
  • USB keyboard events could fail to work within a playlist.
  • Video streams over HTTP using partial downloads and incorrectly generated ETags could crash the player.


Note  
Applies to all DSOS players, except for HMP350, HMP300, and DiVA.


Note  
Applies to HMP350, HMP300, and DiVA.
  • Control Center would show 4K video modes, but these players do not support 4K output.
  • Variable fonts could crash the player.
  • Report can contain legacy `card*-*-edid` files.

Developer

Note  
Applies to all DSOS players.

Configuration API

  • Support for selecting between “auto” (i.e., negotiated with display) or standard video modes (from HDMI specifications).
  • Support for “cvt-R2”, “cbt-R2N”, “cvt-R3”, “cvt-R3L”, “ovt” and “gtf” video modes, while the “cvt-m” and “cvt-Rm” video modes are no longer supported.

Other:

  • The HTTP client in the player now supports HTTP/2.
  • The SVG uDOM now reports the Feature Set active on the player in the navigator object.
We use only essential cookies for site functionality.