The OpenMPT/libopenmpt project released an update to the old libopenmpt 0.5 stable branch:

libopenmpt 0.5.15 (2021-12-23)

  • [Sec] Possible out-of-bounds read of stack-allocated array in malformed AMS files. (r16243)

  • [Bug] Fixed various undefined behaviour found with ubsan.

  • IT: Even after libopenmpt 0.5.14 the filter reset logic was still not 100% identical to Impulse Tracker: A note triggered on tick 0 of a row with a Pattern Delay effect still caused the filter to be reset on repetitions of that row even though the note wasn’t retriggered.

  • MOD: Loosened VBlank timing heuristics so that the original copy of Guitar Slinger from Dizzy Tunes II plays correctly.

  • mpg123: Update to v1.29.3 (2021-12-11).

The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .

Source code download links:

Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.

The security issue fixed in libopenmpt 0.5 does not affect the earlier libopenmpt 0.4 and 0.3 branches.

The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:

libopenmpt 0.4.27 (2021-12-23)

  • [Bug] Fixed various undefined behaviour found with ubsan.

  • IT: Even after libopenmpt 0.4.26 the filter reset logic was still not 100% identical to Impulse Tracker: A note triggered on tick 0 of a row with a Pattern Delay effect still caused the filter to be reset on repetitions of that row even though the note wasn’t retriggered.

  • MOD: Loosened VBlank timing heuristics so that the original copy of Guitar Slinger from Dizzy Tunes II plays correctly.

  • mpg123: Update to v1.29.3 (2021-12-11).

Source code download links:

Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.

The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.3 stable branch:

libopenmpt 0.3.36 (2021-12-23)

  • [Bug] Fixed various undefined behaviour found with ubsan.

  • IT: Even after libopenmpt 0.3.35 the filter reset logic was still not 100% identical to Impulse Tracker: A note triggered on tick 0 of a row with a Pattern Delay effect still caused the filter to be reset on repetitions of that row even though the note wasn’t retriggered.

  • MOD: Loosened VBlank timing heuristics so that the original copy of Guitar Slinger from Dizzy Tunes II plays correctly.

  • mpg123: Update to v1.29.3 (2021-12-11).

Source code download links:

Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.

The following libopenmpt and libopenmpt-modplug versions are currently supported with security fixes by the OpenMPT/libopenmpt project:

  • libopenmpt 0.6.0
    • Current stable version.
    • Receives security updates.
    • Receives minor playback fixes.
  • libopenmpt 0.5.15
    • Old stable version.
    • Receives security updates.
    • Receives trivial bug fixes.
  • libopenmpt 0.4.27
    • Old stable version.
    • Receives security updates.
    • Receives trivial bug fixes.
  • libopenmpt 0.3.36
    • Old stable version.
    • Receives security updates.
    • Receives trivial bug fixes.
  • libopenmpt 0.7 (SVN trunk)
    • development
    • security updates
    • playback fixes
    • new features
    • new file formats
  • libopenmpt-modplug 0.8.9.0-openmpt1
    • Receives security updates.
  • libopenmpt-modplug 0.8.8.5-openmpt1
    • Receives security updates.

Please update to the newest versions.