libopenmpt security updates 0.7.6, 0.6.15, 0.5.29, 0.4.41
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.7.6 (2024-03-24)
-
[Sec] Potential heap out-of-bounds read or write past sample end with malformed sustain loops in SymMOD files (r20420).
- MED: Transposed samples were playing too low in some files (e.g. mix94.mmd1).
- OKT: Some files with garbage at the end were rejected (e.g. katharsis - piano lesson.okta).
- Compressor DMO: It was possible that the plugin would not behave as intended at mix rates above 500 kHz.
- Avoid re-allocating the loop state map contents on every playthrough of the module.
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.6+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.6+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.6+release.msvc.zip
Binary download links:
- Windows 10 21H2 / Windows 7 SP1 (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.6+release.bin.windows.zip
- Windows XP SP1 (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.6+release.bin.retro.winxp.zip
- Windows 98 + KernelEx (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.6+release.bin.retro.win98.zip
- Windows 95 (RETRO) (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.6+release.bin.retro.win95.zip
- DOS 5 (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.6+release.bin.dos.zip
Development library download links:
- Windows 10 21H2 / Windows 7 SP1: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.6+release.dev.windows.vs2022.zip
- Windows XP SP1 (RETRO): https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.6+release.dev.windows.retro.winxp.zip
- WebAssembly / Javascript: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.6+release.dev.js.tar.gz
Documentation download links:
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.6.15 (2024-03-24)
-
[Sec] Potential heap out-of-bounds read or write past sample end with malformed sustain loops in SymMOD files (r20421).
- MED: Transposed samples were playing too low in some files (e.g. mix94.mmd1).
- OKT: Some files with garbage at the end were rejected (e.g. katharsis - piano lesson.okta).
- Compressor DMO: It was possible that the plugin would not behave as intended at mix rates above 500 kHz.
- Avoid re-allocating the loop state map contents on every playthrough of the module.
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.15+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.15+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.15+release.msvc.zip
Binary download links:
- Windows 8.1 or later (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.6.15+release.bin.windows.zip
- Windows 7 SP1 (legacy) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.6.15+release.bin.windows.zip
Development library download links:
- Windows: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.6.15+release.dev.windows.vs2022.zip
Documentation download links:
All downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.5 stable branch:
libopenmpt 0.5.29 (2024-03-24)
-
[Sec] Undefined behaviour in song length calculation with nested loops that cause a length of infinity to be calculated (r20422).
- MED: Transposed samples were playing too low in some files (e.g. mix94.mmd1).
- OKT: Some files with garbage at the end were rejected (e.g. katharsis - piano lesson.okta).
- Compressor DMO: It was possible that the plugin would not behave as intended at mix rates above 500 kHz.
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.29+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.29+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.29+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:
libopenmpt 0.4.41 (2024-03-24)
-
[Sec] Undefined behaviour in song length calculation with nested loops that cause a length of infinity to be calculated (r20423).
- MED: Transposed samples were playing too low in some files (e.g. mix94.mmd1).
- OKT: Some files with garbage at the end were rejected (e.g. katharsis - piano lesson.okta).
- Compressor DMO: It was possible that the plugin would not behave as intended at mix rates above 500 kHz.
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.41+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.41+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.41+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The following libopenmpt and libopenmpt-modplug versions are currently supported with security fixes by the OpenMPT/libopenmpt project:
- libopenmpt 0.7.6
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
- libopenmpt 0.6.15
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.5.29
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.4.41
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.8 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats
- libopenmpt-modplug 0.8.9.0-openmpt1
- Receives security updates.
- libopenmpt-modplug 0.8.8.5-openmpt1
- Receives security updates.
Please update to the newest versions.