libopenmpt security update 0.6.19, releases 0.7.10, 0.5.33, 0.4.45
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.7.10 (2024-09-22)
-
[Change] FST was added to the list of supported file extension. AMP uses this extension for multichannel MODs.
-
[Bug] The Android NDK build system did not enable C++20 when available.
- Fixed inconsistency in length calculation and actual playback length with tempo commands below 32 BPM in various formats (MDL, MED among others).
- MED: Command 09 (set speed) was limited to 20 ticks per row instead of 32 ticks per row.
- MED: Allow tempo parameters < 32 BPM.
- MED: Disallow free panning if hardware mixing is enabled.
- MED: For MOD-style vibrato, a speed parameter of 0 was not treated as effect memory. Vibrato speed is now correct for both vibrato commands.
- MED: Fix pattern index exhaustion in modules with multiple subsongs.
- OKT: Don’t drop global commands when setting paired channel volume, and try to write channel volume on the next row in this situation.
- PTM: Use square root pan law, like in XM files.
- SFX: Ignore unused data at end of oneshot samples which sometimes caused clicky noises.
-
SFX: More accurate implementation of arpeggio effect.
- mpg123: Update to v1.32.7 (2024-08-07).
- minimp3: Update to fork https://github.com/manxorist/minimp3/releases/tag/openmpt-2024-08-15-v4 commit 2116754771b79347ad2f39127abace2a093c383e (2024-08-15).
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.10+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.10+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.10+release.msvc.zip
Binary download links:
- Windows 10 21H2 / Windows 7 SP1 (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.10+release.bin.windows.zip
- Windows XP SP1 (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.10+release.bin.retro.winxp.zip
- Windows 98 + KernelEx (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.10+release.bin.retro.win98.zip
- Windows 95 (RETRO) (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.10+release.bin.retro.win95.zip
- DOS 5 (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.7.10+release.bin.dos.zip
Development library download links:
- Windows 10 21H2 / Windows 7 SP1: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.10+release.dev.windows.vs2022.zip
- Windows XP SP1 (RETRO): https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.10+release.dev.windows.retro.winxp.zip
- WebAssembly / Javascript: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.7.10+release.dev.js.tar.gz
Documentation download links:
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.6.19 (2024-09-22)
-
[Sec] Possible out-of-bounds read with malformed IT / MPTM / XM files using the SymMOD Echo plugin when modern tempo mode with an invalid rows per beat setting of 0 was used (r21607).
- Fixed inconsistency in length calculation and actual playback length with tempo commands below 32 BPM in various formats (MDL, MED among others).
- MED: Command 09 (set speed) was limited to 20 ticks per row instead of 32 ticks per row.
- MED: Allow tempo parameters < 32 BPM.
- SFX: Ignore unused data at end of oneshot samples which sometimes caused clicky noises.
-
SFX: More accurate implementation of arpeggio effect.
- mpg123: Update to v1.32.7 (2024-08-07).
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.19+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.19+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.19+release.msvc.zip
Binary download links:
- Windows 8.1 or later (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.6.19+release.bin.windows.zip
- Windows 7 SP1 (legacy) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.6.19+release.bin.windows.zip
Development library download links:
- Windows: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.6.19+release.dev.windows.vs2022.zip
Documentation download links:
All downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The security issue fixed in libopenmpt 0.6 does not affect the later and earlier libopenmpt 0.7, 0.5, 0.4 branches.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.5 stable branch:
libopenmpt 0.5.33 (2024-09-22)
- Fixed inconsistency in length calculation and actual playback length with tempo commands below 32 BPM in various formats (MDL, MED among others).
- MED: Command 09 (set speed) was limited to 20 ticks per row instead of 32 ticks per row.
-
MED: Allow tempo parameters < 32 BPM.
- mpg123: Update to v1.32.7 (2024-08-07).
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.33+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.33+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.33+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:
libopenmpt 0.4.45 (2024-09-22)
-
Fixed inconsistency in length calculation and actual playback length with tempo commands below 32 BPM in various formats (MDL among others).
-
mpg123: Update to v1.32.7 (2024-08-07).
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.45+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.45+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.45+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The following libopenmpt and libopenmpt-modplug versions are currently supported with security fixes by the OpenMPT/libopenmpt project:
- libopenmpt 0.7.10
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
- libopenmpt 0.6.19
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.5.33
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.4.45
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.8 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats
- libopenmpt-modplug 0.8.9.0-openmpt1
- Receives security updates.
- libopenmpt-modplug 0.8.8.5-openmpt1
- Receives security updates.
Please update to the newest versions.