libopenmpt security updates 0.5.8, 0.4.20, 0.3.29
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.5.8 (2021-04-11)
-
[Sec] Possible null-pointer dereference read caused by a sequence of
openmpt::module::read
,openmpt::module::set_position_order_row
pointing to an invalid pattern, and anotheropenmpt::module::read
call. To trigger the crash, pattern 0 must not exist in the file and the tick speed before the position jump must be lower than the initial speed of the module. (r14530) - [Bug]
libopenmpt.pc
did not list required system librariesole32.lib
andrpcrt4.lib
on Windows inLibs.Private
field for static builds. -
[Bug] libopenmpt 0.5.7 broke seeking in some subsongs.
- The built-in LFO plugin did not load the correct initial LFO frequency.
- IT command S7x (instrument control) is now supported when seeking with sample sync enabled.
-
libopenmpt_ext
play_note
was cutting of channels even when there were plenty of free channels to use. - mpg123: Update to v1.26.5 (2021-03-22).
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.8+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.8+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.8+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:
libopenmpt 0.4.20 (2021-04-11)
-
[Sec] Possible null-pointer dereference read caused by a sequence of
openmpt::module::read
,openmpt::module::set_position_order_row
pointing to an invalid pattern, and anotheropenmpt::module::read
call. To trigger the crash, pattern 0 must not exist in the file and the tick speed before the position jump must be lower than the initial speed of the module. (r14531) - [Bug]
libopenmpt.pc
did not list required system librariesole32.lib
andrpcrt4.lib
on Windows inLibs.Private
field for static builds. -
[Bug] libopenmpt 0.4.19 broke seeking in some subsongs.
- The built-in LFO plugin did not load the correct initial LFO frequency.
-
libopenmpt_ext
play_note
was cutting of channels even when there were plenty of free channels to use. - mpg123: Update to v1.26.5 (2021-03-22).
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.20+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.20+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.20+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.3 stable branch:
libopenmpt 0.3.29 (2021-04-11)
-
[Sec] Possible null-pointer dereference read caused by a sequence of
openmpt::module::read
,openmpt::module::set_position_order_row
pointing to an invalid pattern, and anotheropenmpt::module::read
call. To trigger the crash, pattern 0 must not exist in the file and the tick speed before the position jump must be lower than the initial speed of the module. (r14532) -
[Bug] libopenmpt 0.3.28 broke seeking in some subsongs.
- The built-in LFO plugin did not load the correct initial LFO frequency.
-
libopenmpt_ext
play_note
was cutting of channels even when there were plenty of free channels to use. - mpg123: Update to v1.26.5 (2021-03-22).
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.29+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.29+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.29+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The following libopenmpt versions are currently supported with security fixes by the OpenMPT/libopenmpt project:
- 0.5.8
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
- 0.4.20
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- 0.3.29
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- 0.6 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats
Please update to the newest versions.