libopenmpt security updates 0.8.5, 0.7.18, 0.6.27, 0.5.41, 0.4.53
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.8.5 (2026-03-22)
-
[Sec] Possible out-of-bounds sample data read in a specific combination of reverse sample playback + offset past sample loop. (r25042).
- MOD: ProTracker arpeggio wrapraound results in an effective period of 65536 on Paula, not pausing the sample entirely.
-
ULT: Loop points were incorrectly limited for 16-bit samples.
- zlib: Update to v1.3.2 (2026-02-17).
- miniz: Update to v3.1.1 (2026-02-03).
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.8.5+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.8.5+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.8.5+release.msvc.zip
Binary download links:
- Windows 10 21H2 / Windows 7 SP1 (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.5+release.bin.windows.zip
- Windows XP SP1 (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.5+release.bin.retro.winxp.zip
- Windows 98 + KernelEx (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.5+release.bin.retro.win98.zip
- Windows 95 (RETRO) (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.5+release.bin.retro.win95.zip
- DOS 5 (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.5+release.bin.dos.zip
Development library download links:
- Windows 10 21H2 / Windows 7 SP1: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.8.5+release.dev.windows.vs2022.zip
- Windows XP SP1 (RETRO): https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.8.5+release.dev.windows.retro.winxp.zip
- WebAssembly / Javascript: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.8.5+release.dev.js.tar.gz
Documentation download links:
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.7.18 (2026-03-22)
-
[Sec] Possible out-of-bounds sample data read in a specific combination of reverse sample playback + offset past sample loop. (r25043).
- MOD: ProTracker arpeggio wrapraound results in an effective period of 65536 on Paula, not pausing the sample entirely.
-
ULT: Loop points were incorrectly limited for 16-bit samples.
- zlib: Update to v1.3.2 (2026-02-17).
- miniz: Update to v3.1.1 (2026-02-03).
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.18+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.18+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.18+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.6.27 (2026-03-22)
-
[Sec] Possible out-of-bounds sample data read in a specific combination of reverse sample playback + offset past sample loop. (r25044).
- MOD: ProTracker arpeggio wrapraound results in an effective period of 65536 on Paula, not pausing the sample entirely.
-
ULT: Loop points were incorrectly limited for 16-bit samples.
- zlib: Update to v1.3.2 (2026-02-17).
- miniz: Update to v3.1.1 (2026-02-03).
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.27+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.27+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.27+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.5 stable branch:
libopenmpt 0.5.41 (2026-03-22)
-
[Sec] Possible out-of-bounds sample data read in a specific combination of reverse sample playback + offset past sample loop. (r25045).
- MOD: ProTracker arpeggio wrapraound results in an effective period of 65536 on Paula, not pausing the sample entirely.
-
ULT: Loop points were incorrectly limited for 16-bit samples.
- zlib: Update to v1.3.2 (2026-02-17).
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.41+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.41+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.5.41+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.4 stable branch:
libopenmpt 0.4.53 (2026-03-22)
-
[Sec] Possible out-of-bounds sample data read in a specific combination of reverse sample playback + offset past sample loop. (r25046).
- MOD: ProTracker arpeggio wrapraound results in an effective period of 65536 on Paula, not pausing the sample entirely.
-
ULT: Loop points were incorrectly limited for 16-bit samples.
- zlib: Update to v1.3.2 (2026-02-17).
Source code download links:
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.53+release.autotools.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.53+release.makefile.tar.gz
- https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.4.53+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The following libopenmpt and libopenmpt-modplug versions are currently supported with security fixes by the OpenMPT/libopenmpt project:
- libopenmpt 0.8.5
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
- libopenmpt 0.7.18
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.6.27
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.5.41
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.4.53
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.9 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats
- libopenmpt-modplug 0.8.9.0-openmpt1
- Receives security updates.
- libopenmpt-modplug 0.8.8.5-openmpt1
- Receives security updates.
Please update to the newest versions.