libopenmpt security updates 0.7.5, 0.6.14, 0.5.28, 0.4.40
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.7.5 (2024-03-17)
- [Sec] Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20336, r20338).
- [Sec] Write buffer overflow when reading unseekable files close to 4GiB in size (r20339).
- [Sec] Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20340).
-
[Sec] DMF: Possible null-pointer write or excessive memory allocation when reading DMF files (r20323).
- IT: In the previous version, Zxx macros in IT files made with older MPT versions were no longer working.
- There was a periodic click when playing a module using the Chorus or Flanger DMO plugin at a mix rate exceeding ~136.5 kHz.
-
An older bugfix for undefined behaviour in the Distortion DMO plugin was incorrect, causing the distorted sound to be different in some situations.
- xmp-openmpt: Metadata retrievel for playlist items was broken.
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.5+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.5+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.5+release.msvc.zip
Binary download links:
- Windows 10 21H2 / Windows 7 SP1 (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.5+release.bin.windows.zip
- Windows XP SP1 (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.5+release.bin.retro.winxp.zip
- Windows 98 + KernelEx (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.5+release.bin.retro.win98.zip
- Windows 95 (RETRO) (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.5+release.bin.retro.win95.zip
- DOS 5 (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.5+release.bin.dos.zip
Development library download links:
- Windows 10 21H2 / Windows 7 SP1: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.5+release.dev.windows.vs2022.zip
- Windows XP SP1 (RETRO): https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.5+release.dev.windows.retro.winxp.zip
- WebAssembly / Javascript: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.5+release.dev.js.tar.gz
Documentation download links:
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.6.14 (2024-03-17)
- [Sec] Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20341, r20343).
- [Sec] Write buffer overflow when reading unseekable files close to 4GiB in size (r20344).
- [Sec] Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20345).
-
[Sec] DMF: Possible null-pointer write or excessive memory allocation when reading DMF files (r20324).
- IT: In the previous version, Zxx macros in IT files made with older MPT versions were no longer working.
- There was a periodic click when playing a module using the Chorus or Flanger DMO plugin at a mix rate exceeding ~136.5 kHz.
-
An older bugfix for undefined behaviour in the Distortion DMO plugin was incorrect, causing the distorted sound to be different in some situations.
- xmp-openmpt: Metadata retrievel for playlist items was broken.
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.14+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.14+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.14+release.msvc.zip
Binary download links:
- Windows 8.1 or later (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.6.14+release.bin.windows.zip
- Windows 7 SP1 (legacy) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.6.14+release.bin.windows.zip
Development library download links:
- Windows: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.6.14+release.dev.windows.vs2022.zip
Documentation download links:
All downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.5 stable branch:
libopenmpt 0.5.28 (2024-03-17)
- [Sec] Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20346, r20347).
- [Sec] Write buffer overflow when reading unseekable files close to 4GiB in size (r20348).
- [Sec] Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20349).
-
[Sec] DMF: Possible null-pointer write or excessive memory allocation when reading DMF files (r20325).
- IT: In the previous version, Zxx macros in IT files made with older MPT versions were no longer working.
-
An older bugfix for undefined behaviour in the Distortion DMO plugin was incorrect, causing the distorted sound to be different in some situations.
- xmp-openmpt: Metadata retrievel for playlist items was broken.
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.28+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.28+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.28+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:
libopenmpt 0.4.40 (2024-03-17)
- [Sec] Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20350, r20351).
- [Sec] Write buffer overflow when reading unseekable files close to 4GiB in size (r20352).
-
[Sec] Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20353).
- IT: In the previous version, Zxx macros in IT files made with older MPT versions were no longer working.
- An older bugfix for undefined behaviour in the Distortion DMO plugin was incorrect, causing the distorted sound to be different in some situations.
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.40+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.40+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.40+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The following libopenmpt and libopenmpt-modplug versions are currently supported with security fixes by the OpenMPT/libopenmpt project:
- libopenmpt 0.7.5
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
- libopenmpt 0.6.14
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.5.28
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.4.40
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.8 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats
- libopenmpt-modplug 0.8.9.0-openmpt1
- Receives security updates.
- libopenmpt-modplug 0.8.8.5-openmpt1
- Receives security updates.
Please update to the newest versions.