libopenmpt and openmpt123 - libopenmpt security update 0.5.7, releases 0.4.19, 0.3.28

The OpenMPT/libopenmpt project released the latest stable libopenmpt version:

libopenmpt 0.5.7 (2021-03-20)

[Sec] Possible null-pointer dereference read caused by a sequence of openmpt::module::read, openmpt::module::set_position_seconds with a position past the song end, and another openmpt::module::read call. (r14363)
IT: Instrument / sample panning was reset on note-off / fade commands.
IMF: Set Finetune is now implemented correctly.
Fixed excessive memory consumption with malformed files in various formats.

The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .

Source code download links:

Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.

The security issue fixed in libopenmpt 0.5 does not affect the earlier libopenmpt 0.4 and 0.3 branches.

The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:

Source code download links:

Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.

The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.3 stable branch:

Source code download links:

Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.

The following libopenmpt versions are currently supported with security fixes by the OpenMPT/libopenmpt project:

0.5.7
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
0.4.19
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
0.3.28
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
0.6 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats

Please update to the newest versions.