modplug-libopenmpt-announce — libopenmpt release and security announcements

[libopenmpt-announce] modplug-libopenmpt-announce list shutdown

[<mod...@li...>]

modplug-libopenmpt-announce list shutdown
=========================================

tl;dr: The modplug-libopenmpt-announce list is shutting down
effective immediately. Please use
<https://lib.openmpt.org/libopenmpt/feed.xml> instead.


The modplug-libopenmpt-announce mailing list is hosted on SourceForge.
SourceForge has experienced repeated service outages in recent times,
which have either been delaying mail delivery for multiple days or in
some cases even silently discarded mails. As SourceForge is apparently
unable to provide a reliable service, the libopenmpt project cannot
trust this infrastructure any more. We cannot use this mailing list to
issue security announcements any more because we have no confidence
that the announcements actually reach the people who are subscribed to
the list.

The libopenmpt project will continue to issue security and release
announcements via our Atom feed at
<https://lib.openmpt.org/libopenmpt/feed.xml>.

Please unsubscribe from this list. It is dead effective immediately.


Regards,
Jörn 'manx' Heusipp
Johannes ‘Saga Musix’ Schultz

[libopenmpt-announce] libopenmpt security update 0.3.6

[<mod...@li...>]

libopenmpt security update 0.3.6
================================



The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.6 (2018-02-03)
-----------------------------

  *  [**Sec**] Possible out-of-bounds memory read with malformed STP files.
     (r9576)

  *  [**Bug**] Small memory leak with malformed STP files.

  *  STM: Accurate emulation of Scream Tracker 2 tempo mode.
  *  STM: Better support for early format revisions (no such files have been
     found in the wild, though).
  *  Fine volume slides are now supported when seeking with 
seek.sync_samples=1
     enabled.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.6+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.6+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.6+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


The security issue fixed in libopenmpt 0.3 does not affect the earlier
libopenmpt 0.2 branch. Thus, the libopenmpt 0.2.9542-beta29, libopenmpt
0.2.7561-beta20.5 and libopenmpt 0.2.7386-beta20.3 lines require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.6
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.9542-beta29
      *  Old stable version.
      *  Receives security updates.
      *  Receives trivial bug fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.5 and 0.2.9542-beta29

[<mod...@li...>]

libopenmpt release 0.3.5 and 0.2.9542-beta29
============================================


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.5 (2018-01-28)
-----------------------------

  *  [**Bug**] VS2015 project files targetting Windows XP did not set 
compiler
     option `/Zc:threadSafeInit-` which could cause at least the player 
plugins
     `in_openmpt` and `xmp-openmpt` to fail to load.

  *  J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
     since libopenmpt-0.2.6401-beta17.
  *  STM: Last character of sample name was missing.
  *  ParamEq plugin center frequency was not limited correctly.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


The OpenMPT/libopenmpt project also released an update to the old 
libopenmpt 0.2
stable branch:


libopenmpt 0.2.9542-beta29 (2018-01-28)
---------------------------------------

  *  [**Bug**] VS2015 project files targetting Windows XP did not set 
compiler
     option `/Zc:threadSafeInit-` which could cause at least the player 
plugins
     `in_openmpt` and `xmp-openmpt` to fail to load.

  *  J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
     since libopenmpt-0.2.6401-beta17.
  *  STM: Last character of sample name was missing.
  *  ParamEq plugin center frequency was not limited correctly.

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-windows.zip>


___


None of the fixes that went into libopenmpt 0.3.5 and/or libopenmpt
0.2.9542-beta29 are security fixes. Thus, the libopenmpt 
0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.5
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.9542-beta29
      *  Old stable version.
      *  Receives security updates.
      *  Receives trivial bug fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.5 and 0.2.9542-beta29 (resend)

[<mod...@li...>]

libopenmpt release 0.3.5 and 0.2.9542-beta29
============================================


The previous mail contained wrong changelog entries for libopenmpt 0.3.5.


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.5 (2018-01-28)
-----------------------------

  *  [**New**] Support MOD files from the Inconexia demo by Iguana.
  *  [**Bug**] xmp-openmpt: Saved settings were not applied instantly.

  *  XM E60 loop bug was not considered in song length calucation.
  *  Tighten M15 and MOD file rejection heuristics.
  *  J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
     since libopenmpt-0.2.6401-beta17.
  *  STM: Last character of sample name was missing.
  *  ParamEq plugin center frequency was not limited correctly.
  *  libopenmpt_ext C API was not included in the documentation.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


The OpenMPT/libopenmpt project also released an update to the old 
libopenmpt 0.2
stable branch:


libopenmpt 0.2.9542-beta29 (2018-01-28)
---------------------------------------

  *  [**Bug**] VS2015 project files targetting Windows XP did not set 
compiler
     option `/Zc:threadSafeInit-` which could cause at least the player 
plugins
     `in_openmpt` and `xmp-openmpt` to fail to load.

  *  J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
     since libopenmpt-0.2.6401-beta17.
  *  STM: Last character of sample name was missing.
  *  ParamEq plugin center frequency was not limited correctly.

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-windows.zip>


___


None of the fixes that went into libopenmpt 0.3.5 and/or libopenmpt
0.2.9542-beta29 are security fixes. Thus, the libopenmpt 
0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.5
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.9542-beta29
      *  Old stable version.
      *  Receives security updates.
      *  Receives trivial bug fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.4

[<mod...@li...>]

libopenmpt release 0.3.4
========================


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.4 (2017-12-17)
-----------------------------

  *  IT: Fix broken volume envelopes with negative values as found in 
breakdwn.it
     by Elysis.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.4+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.4+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.4+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


None of the fixes that went into libopenmpt 0.3.4 are security fixes. 
Thus, the
libopenmpt 0.2, libopenmpt 0.2.7561-beta20.5 and 
libopenmpt-0.2.7386-beta20.3
lines require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.4
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.9227-beta28
      *  Old stable version.
      *  Receives security updates.
      *  Receives trivial bug fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.3

[<mod...@li...>]

libopenmpt release 0.3.3
========================


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.3 (2017-11-19)
-----------------------------

  *  [**New**] foo_openmpt: foo_openmpt now also works on Windows XP.

  *  [**Bug**] All VS2015 and VS2017 project files targetting Windows XP 
did not
     set compiler option `/Zc:threadSafeInit-` which caused at least the 
player
     plugins `in_openmpt` and `xmp-openmpt` to fail to load.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.3+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.3+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.3+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


None of the fixes that went into libopenmpt 0.3.3 are security fixes. 
Thus, the
libopenmpt 0.2.7561-beta20.5 and libopenmpt-0.2.7386 beta20.3 lines 
require no
update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.3
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.9227-beta28
      *  Old stable version.
      *  Receives security updates.
      *  Receives trivial bug fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.2 and 0.2.9227-beta28

[<mod...@li...>]

libopenmpt release 0.3.2 and 0.2.9227-beta28
============================================



The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.2 (2017-11-04)
-----------------------------

  *  [**New**] Autotools `configure` and plain `Makefile` now honor the 
variable
     `CXXSTDLIB_PCLIBSPRIVATE` which serves the sole purpose of listing the
     standard library (or libraries) required for static linking. The 
contents of
     this variable will be put in `libopenmpt.pc` `Libs.private` and 
used for
     nothing else. See
 
<https://lib.openmpt.org/doc/libopenmpt_c_overview.html#libopenmpt_c_staticlinking>
     .

  *  [**Change**] Windows bin and dev release packages now use zip archives
     instead of 7z archives as it had originally been intended for the 0.3.0
     release.
  *  [**Change**] openmpt123: The following combinations of options are not
     deprecated because they made no real sense in the first place:
     `--render --output`, `--ui --output-type`, `--batch --output-type`

  *  [**Bug**] libopenmpt did not build on Android NDK 15c (and possibly
     other versions between 12b and 15c as well).

  *  IT: In Compatible Gxx mode, allow sample changes next to a tone 
portamento
     effect if a previous sample has already stopped playing.
  *  MOD: Slides and delayed notes are executed on every repetition of a 
row with
     row delay (fixes "ode to protracker").

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.2+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.2+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.2+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


The OpenMPT/libopenmpt project also released an update to the old 
libopenmpt 0.2
stable branch:


libopenmpt 0.2.9227-beta28 (2017-11-04)
---------------------------------------

  *  [**Bug**] libopenmpt did not build on Android NDK 15c (and possibly
     other versions between 12b and 15c as well).

  *  MT2 offset + delay command was not imported correctly.
  *  If the order list was longer than 256 items and there was a pattern 
break
     effect without a position jump on the last pattern of the sequence, 
it did
     not jump to the correct restart order.
  *  Tighten MOD / ICE rejection heuristics for invalid files and loosen 
them in
     other places to allow some valid MOD files to load.
  *  Some valid FAR files were rejected erroneously.
  *  Improved accuracy of vibrato command in DIGI / DBM files.
  *  IT: In Compatible Gxx mode, allow sample changes next to a tone 
portamento
     effect if a previous sample has already stopped playing.

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9227-beta28-autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9227-beta28.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9227-beta28-windows.zip>


___


None of the fixes that went into libopenmpt 0.3.2 and/or libopenmpt
0.2.9227-beta28 are security fixes. Thus, the libopenmpt 
0.2.7561-beta20.5 and
libopenmpt-0.2.7386 beta20.3 lines require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.2
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.9227-beta28
      *  Old stable version.
      *  Receives security updates.
      *  Receives trivial bug fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.1 (resend)

[<mod...@li...>]

Hello.

Some mailing list subscribers have already received this mail, however 
some apparently did not.

I had sent this mail originally shortly after a service outage at 
sourceforge which apparently was not yet completely resolved, thus some 
mails might have gotten eaten by the system.

Note that you can also receive these updates via an Atom feed which is 
hosted on openmpt.org itself, and does not depend on sourceforge working 
correctly.
The libopenmpt Atom feed is at
<https://lib.openmpt.org/libopenmpt/feed.xml>
.


libopenmpt release 0.3.1
========================


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.3.1 (2017-09-28)
-----------------------------

Changelog since libopenmpt 0.2.6774-beta20.

libopenmpt 0.3.1

  *  [**Bug**] Windows: libopenmpt resource did not compile for release 
versions.

libopenmpt 0.3.0 (2017-09-27, not released)

  *  [**New**] New error handling functionality in the C API, which in 
particular
     allows distinguishing potentially transient out-of-memory errors 
from parse
     errors during module loading.  *  [**New**] New API 
`openmpt::module::get_selected_subsong()` (C++) and
     `openmpt_module_get_selected_subsong()` (C).
  *  [**New**] Faster file header probing API 
`openmpt::probe_file_header()` and
     `openmpt::probe_file_header_get_recommended_size` (C++), and
     `openmpt_probe_file_header()`,
     `openmpt_probe_file_header_without_filesize()`,
     `openmpt_probe_file_header_from_stream()` and
     `openmpt_probe_file_header_get_recommended_size()` (C).
  *  [**New**] New API `openmpt::could_open_probability()` (C++) and
     `openmpt_could_open_probability()` (C). This fixes a spelling error 
in the
     old 0.2 API.
  *  [**New**] openmpt123: openmpt123 can now open M3U, M3U8, M3UEXT, 
M3U8EXT and
     PLSv2 playlists via the `--playlist` option.
  *  [**New**] openmpt123: openmpt123 now supports very fast file header 
probing
     via the `--probe` option.
  *  [**New**] Libopenmpt now supports building for Windows 10 Universal 
(Windows
     Store 8.2) APIs with MSVC, and also for the older Windows Runtime 
APIs with
     MinGW-w64.
  *  [**New**] New API header `libopenmpt_ext.h` which implements the 
libopenmpt
     extension APIs also for the C interface.
  *  [**New**] The Reverb effect (S99 in S3M/IT/MPTM, and X99 in XM) is now
     implemented in libopenmpt.
  *  [**New**] For Amiga modules, a new resampler based on the Amiga's sound
     characteristics has been added. It can be activated by passing the
     `render.resampler.emulate_amiga` ctl with a value of `1`. Non-Amiga 
modules
     are not affected by this, and setting the ctl overrides the 
resampler choice
     specified by `OPENMPT_MODULE_RENDER_INTERPOLATIONFILTER_LENGTH` or
     `openmpt::module::RENDER_INTERPOLATIONFILTER_LENGTH`. Support for 
the MOD
     command E0x (Set LED Filter) is also available when the Amiga 
resampler is
     enabled.
  *  [**Change**] libopenmpt versioning changed and follows the more 
conventional
     major.minor.patch as well as the recommendations of the
     [SemVer](http://semver.org/) scheme now. In addition to the SemVer
     requirements, pre-1.0.0 versions will also honor API and ABI 
stability in
     libopenmpt (i.e. libopenmpt ignores SemVer Clause 4).  * 
[**Change**] The output directories of the MSVC build system were changed to
     `bin/vs2015-shared/x86-64-win7/` (and similar) layout which allows 
building
     in the same tree with different compiler versions without 
overwriting other
     outputs.
  *  [**Change**] The emscripten build now exports libopenmpt as 
'libopenmpt'
     instead of the default 'Module'.
  *  [**Change**] Android: The build system changed. The various 
Android.mk files
     have been merged into a single one which can be controlled using 
command
     line options.
  *  [**Change**] The `Makefile` build system now passes `std=c++11` to the
     compiler by default. Older compilers may still work if you pass
     `STDCXX=c++0x` to the `make` invocation.
  *  [**Change**] The `Makefile` option `ANCIENT=1` is gone.
  *  [**Change**] The optional dependencies on `libltdl` or `libdl` are 
gone.
     They are no longer needed for any functionality.

  *  [**Regression**] Compiling client code using the C++ API now requires a
     compiler running in C++11 mode.
  *  [**Regression**] Support for GCC 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7 
has been
     removed.
  *  [**Regression**] Support for Clang 3.0, 3.1, 3.2, 3.3 has been removed.
  *  [**Regression**] Support for Emscripten versions older than 1.31.0 
has been
     removed.
  *  [**Regression**] Support for Android NDK versions older than 11 has 
been
     removed.
  *  [**Regression**] Visual Studio 2008, 2010, 2012, 2013 support has been
     removed.
  *  [**Regression**] Dynamic run-time loading of libmpg123 is no longer
     supported. Libmpg123 must be linked at link-time now.
  *  [**Regression**] xmp-openmpt: xmp-openmpt now requires XMPlay 3.8 
or later
     and compiling xmp-openmpt requires an appropriate XMPlay SDK with
     `XMPIN_FACE` >= `4`.
  *  [**Regression**] Support for libmpg123 older than 1.13.0 has been 
removed.
  *  [**Regression**] Un4seen unmo3 support has been removed.

  *  [**Bug**] C++ API: `openmpt::exception` did not define copy and move
     constructors or copy and move assignment operators in libopenmpt 
0.2. The
     compiler-generated ones were not adequate though. libopenmpt 0.3 
adds the
     appropriate special member functions. This adds the respective 
symbol names
     to the exported ABI, which, depending on the compiler, might or 
might not
     have been there in libopenmpt 0.2. The possibly resulting possible ODR
     violation only affects cases that did crash in the libopenmpt 0.2 
API anyway
     due to memory double-free, and does not cause any further problems in
     practice for all known platforms and compilers.
  *  [**Bug**] The C API could crash instead of failing gracefully in
     out-of-memory situations.
  *  [**Bug**] The test suite could fail on MacOSX or FreeBSD in 
non-fatal ways
     when no locale was active.
  *  [**Bug**] `libopenmpt_stream_callbacks_fd.h` and
     `libopenmpt_stream_callbacks_file.h` were missing in Windows 
development
     packages.
  *  [**Bug**] libopenmpt on Windows did not properly guard against current
     working directory DLL injection attacks.
  *  [**Bug**] localtime() was used to determine the version of Schism 
Tracker
     used to save IT and S3M files. This function is not guaranteed to be
     thread-safe by the standard and is now no longer used.
  *  [**Bug**] Possible crashes with malformed IT, ITP, AMS, MDL, MED, 
MPTM, PSM
     and Startrekker files.
  *  [**Bug**] Possible hangs with malformed DBM, MPTM and PSM files.
  *  [**Bug**] Possible hangs with malformed files containing cyclic plugin
     routings.
  *  [**Bug**] Excessive loading times with malformed ITP / truncated 
AMS files.
  *  [**Bug**] Plugins did not work correctly when changing the sample rate
     between two render calls.
  *  [**Bug**] Possible NULL-pointer dereference read during obscure
     out-of-memory situations while handling exceptions in the C API.
  *  [**Bug**] libmodplug: `libmodplug.pc` was wrong.
  *  [**Bug**] Cross-compiling libopenmpt with autotools for Windows now 
properly
     sets `-municode` and `-mconsole` as well as all required Windows system
     libraries.
  *  [**Bug**] foo_openmpt: Interpolation filter and volume ramping 
settings were
     confused in previous versions. This version resets both to the 
defaults.
  *  [**Bug**] libmodplug: The CSoundFile::Read function in the emulated
     libmodplug C++ API returned the wrong value, causing qmmp (and possibly
     other software) to crash.

  *  Support for SoundTracker Pro II (STP) and Digital Tracker (DTM) 
modules.
  *  Increased accuracy of the sample position and sample rate to drift 
less when
     playing very long samples.
  *  Various playback improvements for IT and XM files.
  *  Channel frequency could wrap around after some excessive portamento 
/ down
     in some formats since libopenmpt 0.2-beta17.
  *  Playback improvements for S3M files made with Impulse Tracker and
     Schism Tracker.
  *  ParamEq plugin emulation didn't do anything at full gain (+15dB).
  *  All standard DMO effects are now also emulated on non-Windows and 
non-MSVC
     systems.
  *  Added `libopenmpt_stream_callbacks_buffer.h` which adds
     `openmpt_stream_callbacks` support for in-memory buffers, possibly 
even only
     using a truncated prefix view into a bigger file which is useful for
     probing.
  *  Avoid enabling some ProTracker-specific quirks for MOD files most 
likely
     created with ScreamTracker 3.
  *  Tremolo effect only had half the intended strength in MOD files.
  *  Pattern loops ending on the last row a pattern were not executed 
correctly
     in S3M files.
  *  Work-around for reading MIDI macros and plugin settings in some 
malformed IT
     files written by old UNMO3 versions.
  *  Improve tracker detection in IT format.
  *  Playback fixes for 8-channel MED files
  *  Do not set note volume to 0 on out-of-range offset in XM files.
  *  Better import of some slide commands in SFX files.
  *  Sample 15 in "Crew Generation" by Necros requires short loops at the
     beginning of the sample to not be ignored. Since we need to ignore 
them in
     some (non-ProTracker) modules, we heuristically disable the old loop
     sanitization behaviour based on the module channel count.
  *  Both normal and percentage offset in PLM files were handled as 
percentage
     offset.
  *  MT2 files with instruments that had both sample and plugin 
assignments were
     not read correctly.
  *  Some valid FAR files were rejected erroneously.
  *  Support for VBlank timing flag and comment field in PT36 files.
  *  Improved accuracy of vibrato command in DIGI / DBM files.
  *  STM: Add support for "WUZAMOD!" magic bytes and allow some slightly
     malformed STM files to load which were previously rejected.
  *  Detect whether "hidden" patterns in the order list of SoundTracker 
modules
     should be taken into account or not.
  *  Tighten heuristics for rejecting invalid 669, M15, MOD and ICE 
files and
     loosen them in other places to allow some valid MOD files to load.
  *  Improvements to seeking: Channel panning was not always updated from
     instruments / samples when seeking, and out-of-range global volume 
was not
     applied correctly in some formats.
  *  seek.sync_samples=1 did not apply PTM reverse offset effect and the 
volume
     slide part of combined volume slide + vibrato commands.
  *  If the order list was longer than 256 items and there was a pattern 
break
     effect without a position jump on the last pattern of the sequence, 
it did
     not jump to the correct restart order.
  *  `Makefile` has now explicit support for FreeBSD with no special 
option or
     configuration required.
  *  openmpt123: Improved section layout in man page.
  *  libmodplug: Added all missing C++ API symbols that are accessible 
via the
     public libmodplug header file.
  *  Autotools build system now has options `--disable-openmpt123`,
     `--disable-tests` and `--disable-examples` which may be desireable when
     cross-compiling.
  *  Windows binary packages now ship with libmpg123 included.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.makefile.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


Libopenmpt 0.3.1 contains all security fixes that went into libopenmpt 
0.2 since
the point where libopenmpt 0.2 and 0.3 branched.

The libopenmpt-0.2, libopenmpt-0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update right now.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.3.1
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.8760-beta27
      *  Old stable version.
      *  Receives security updates.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.4 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at 
<https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release 0.3.1

[<mod...@li...>]

libopenmpt release 0.3.1
========================


The OpenMPT/libopenmpt project released the latest stable libopenmpt version:


libopenmpt 0.3.1 (2017-09-28)
-----------------------------

Changelog since libopenmpt 0.2.6774-beta20.

libopenmpt 0.3.1

 *  [**Bug**] Windows: libopenmpt resource did not compile for release versions.

libopenmpt 0.3.0 (2017-09-27, not released)

 *  [**New**] New error handling functionality in the C API, which in particular
    allows distinguishing potentially transient out-of-memory errors from parse
    errors during module loading. 
 *  [**New**] New API `openmpt::module::get_selected_subsong()` (C++) and
    `openmpt_module_get_selected_subsong()` (C).
 *  [**New**] Faster file header probing API `openmpt::probe_file_header()` and
    `openmpt::probe_file_header_get_recommended_size` (C++), and
    `openmpt_probe_file_header()`,
    `openmpt_probe_file_header_without_filesize()`,
    `openmpt_probe_file_header_from_stream()` and
    `openmpt_probe_file_header_get_recommended_size()` (C).
 *  [**New**] New API `openmpt::could_open_probability()` (C++) and
    `openmpt_could_open_probability()` (C). This fixes a spelling error in the
    old 0.2 API.
 *  [**New**] openmpt123: openmpt123 can now open M3U, M3U8, M3UEXT, M3U8EXT and
    PLSv2 playlists via the `--playlist` option.
 *  [**New**] openmpt123: openmpt123 now supports very fast file header probing
    via the `--probe` option.
 *  [**New**] Libopenmpt now supports building for Windows 10 Universal (Windows
    Store 8.2) APIs with MSVC, and also for the older Windows Runtime APIs with
    MinGW-w64.
 *  [**New**] New API header `libopenmpt_ext.h` which implements the libopenmpt
    extension APIs also for the C interface.
 *  [**New**] The Reverb effect (S99 in S3M/IT/MPTM, and X99 in XM) is now
    implemented in libopenmpt.
 *  [**New**] For Amiga modules, a new resampler based on the Amiga's sound
    characteristics has been added. It can be activated by passing the
    `render.resampler.emulate_amiga` ctl with a value of `1`. Non-Amiga modules
    are not affected by this, and setting the ctl overrides the resampler choice
    specified by `OPENMPT_MODULE_RENDER_INTERPOLATIONFILTER_LENGTH` or
    `openmpt::module::RENDER_INTERPOLATIONFILTER_LENGTH`. Support for the MOD
    command E0x (Set LED Filter) is also available when the Amiga resampler is
    enabled. 

 *  [**Change**] libopenmpt versioning changed and follows the more conventional
    major.minor.patch as well as the recommendations of the
    [SemVer](http://semver.org/) scheme now. In addition to the SemVer
    requirements, pre-1.0.0 versions will also honor API and ABI stability in
    libopenmpt (i.e. libopenmpt ignores SemVer Clause 4). 
 *  [**Change**] The output directories of the MSVC build system were changed to
    `bin/vs2015-shared/x86-64-win7/` (and similar) layout which allows building
    in the same tree with different compiler versions without overwriting other
    outputs.
 *  [**Change**] The emscripten build now exports libopenmpt as 'libopenmpt'
    instead of the default 'Module'.
 *  [**Change**] Android: The build system changed. The various Android.mk files
    have been merged into a single one which can be controlled using command
    line options.
 *  [**Change**] The `Makefile` build system now passes `std=c++11` to the
    compiler by default. Older compilers may still work if you pass
    `STDCXX=c++0x` to the `make` invocation.
 *  [**Change**] The `Makefile` option `ANCIENT=1` is gone.
 *  [**Change**] The optional dependencies on `libltdl` or `libdl` are gone.
    They are no longer needed for any functionality.

 *  [**Regression**] Compiling client code using the C++ API now requires a
    compiler running in C++11 mode.
 *  [**Regression**] Support for GCC 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7 has been
    removed.
 *  [**Regression**] Support for Clang 3.0, 3.1, 3.2, 3.3 has been removed.
 *  [**Regression**] Support for Emscripten versions older than 1.31.0 has been
    removed.
 *  [**Regression**] Support for Android NDK versions older than 11 has been
    removed.
 *  [**Regression**] Visual Studio 2008, 2010, 2012, 2013 support has been
    removed.
 *  [**Regression**] Dynamic run-time loading of libmpg123 is no longer
    supported. Libmpg123 must be linked at link-time now.
 *  [**Regression**] xmp-openmpt: xmp-openmpt now requires XMPlay 3.8 or later
    and compiling xmp-openmpt requires an appropriate XMPlay SDK with
    `XMPIN_FACE` >= `4`.
 *  [**Regression**] Support for libmpg123 older than 1.13.0 has been removed.
 *  [**Regression**] Un4seen unmo3 support has been removed.

 *  [**Bug**] C++ API: `openmpt::exception` did not define copy and move
    constructors or copy and move assignment operators in libopenmpt 0.2. The
    compiler-generated ones were not adequate though. libopenmpt 0.3 adds the
    appropriate special member functions. This adds the respective symbol names
    to the exported ABI, which, depending on the compiler, might or might not
    have been there in libopenmpt 0.2. The possibly resulting possible ODR
    violation only affects cases that did crash in the libopenmpt 0.2 API anyway
    due to memory double-free, and does not cause any further problems in
    practice for all known platforms and compilers.
 *  [**Bug**] The C API could crash instead of failing gracefully in
    out-of-memory situations.
 *  [**Bug**] The test suite could fail on MacOSX or FreeBSD in non-fatal ways
    when no locale was active.
 *  [**Bug**] `libopenmpt_stream_callbacks_fd.h` and
    `libopenmpt_stream_callbacks_file.h` were missing in Windows development
    packages.
 *  [**Bug**] libopenmpt on Windows did not properly guard against current
    working directory DLL injection attacks.
 *  [**Bug**] localtime() was used to determine the version of Schism Tracker
    used to save IT and S3M files. This function is not guaranteed to be
    thread-safe by the standard and is now no longer used.
 *  [**Bug**] Possible crashes with malformed IT, ITP, AMS, MDL, MED, MPTM, PSM
    and Startrekker files.
 *  [**Bug**] Possible hangs with malformed DBM, MPTM and PSM files.
 *  [**Bug**] Possible hangs with malformed files containing cyclic plugin
    routings.
 *  [**Bug**] Excessive loading times with malformed ITP / truncated AMS files.
 *  [**Bug**] Plugins did not work correctly when changing the sample rate
    between two render calls.
 *  [**Bug**] Possible NULL-pointer dereference read during obscure
    out-of-memory situations while handling exceptions in the C API.
 *  [**Bug**] libmodplug: `libmodplug.pc` was wrong.
 *  [**Bug**] Cross-compiling libopenmpt with autotools for Windows now properly
    sets `-municode` and `-mconsole` as well as all required Windows system
    libraries.
 *  [**Bug**] foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
 *  [**Bug**] libmodplug: The CSoundFile::Read function in the emulated
    libmodplug C++ API returned the wrong value, causing qmmp (and possibly
    other software) to crash.

 *  Support for SoundTracker Pro II (STP) and Digital Tracker (DTM) modules.
 *  Increased accuracy of the sample position and sample rate to drift less when
    playing very long samples.
 *  Various playback improvements for IT and XM files.
 *  Channel frequency could wrap around after some excessive portamento / down
    in some formats since libopenmpt 0.2-beta17.
 *  Playback improvements for S3M files made with Impulse Tracker and
    Schism Tracker.
 *  ParamEq plugin emulation didn't do anything at full gain (+15dB).
 *  All standard DMO effects are now also emulated on non-Windows and non-MSVC
    systems.
 *  Added `libopenmpt_stream_callbacks_buffer.h` which adds
    `openmpt_stream_callbacks` support for in-memory buffers, possibly even only
    using a truncated prefix view into a bigger file which is useful for
    probing.
 *  Avoid enabling some ProTracker-specific quirks for MOD files most likely
    created with ScreamTracker 3.
 *  Tremolo effect only had half the intended strength in MOD files.
 *  Pattern loops ending on the last row a pattern were not executed correctly
    in S3M files.
 *  Work-around for reading MIDI macros and plugin settings in some malformed IT
    files written by old UNMO3 versions.
 *  Improve tracker detection in IT format.
 *  Playback fixes for 8-channel MED files
 *  Do not set note volume to 0 on out-of-range offset in XM files.
 *  Better import of some slide commands in SFX files.
 *  Sample 15 in "Crew Generation" by Necros requires short loops at the
    beginning of the sample to not be ignored. Since we need to ignore them in
    some (non-ProTracker) modules, we heuristically disable the old loop
    sanitization behaviour based on the module channel count.
 *  Both normal and percentage offset in PLM files were handled as percentage
    offset.
 *  MT2 files with instruments that had both sample and plugin assignments were
    not read correctly.
 *  Some valid FAR files were rejected erroneously.
 *  Support for VBlank timing flag and comment field in PT36 files.
 *  Improved accuracy of vibrato command in DIGI / DBM files.
 *  STM: Add support for "WUZAMOD!" magic bytes and allow some slightly
    malformed STM files to load which were previously rejected.
 *  Detect whether "hidden" patterns in the order list of SoundTracker modules
    should be taken into account or not.
 *  Tighten heuristics for rejecting invalid 669, M15, MOD and ICE files and
    loosen them in other places to allow some valid MOD files to load.
 *  Improvements to seeking: Channel panning was not always updated from
    instruments / samples when seeking, and out-of-range global volume was not
    applied correctly in some formats.
 *  seek.sync_samples=1 did not apply PTM reverse offset effect and the volume
    slide part of combined volume slide + vibrato commands.
 *  If the order list was longer than 256 items and there was a pattern break
    effect without a position jump on the last pattern of the sequence, it did
    not jump to the correct restart order.
 *  `Makefile` has now explicit support for FreeBSD with no special option or
    configuration required.
 *  openmpt123: Improved section layout in man page.
 *  libmodplug: Added all missing C++ API symbols that are accessible via the
    public libmodplug header file.
 *  Autotools build system now has options `--disable-openmpt123`,
    `--disable-tests` and `--disable-examples` which may be desireable when
    cross-compiling.
 *  Windows binary packages now ship with libmpg123 included.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
 *  <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.autotools.tar.gz>
 *  <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.makefile.tar.gz>
 *  <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.msvc.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.


___


Libopenmpt 0.3.1 contains all security fixes that went into libopenmpt 0.2 since
the point where libopenmpt 0.2 and 0.3 branched.

The libopenmpt-0.2, libopenmpt-0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update right now.


___


The following libopenmpt versions are currently supported with security fixes by
the OpenMPT/libopenmpt project:

 *  0.3.1
     *  Current stable version.
     *  Receives security updates.
     *  Receives minor playback fixes.
 *  0.2.8760-beta27
     *  Old stable version.
     *  Receives security updates.
 *  0.2.7561-beta20.5-p7
     *  Older stable version which is supported on Unix-like systems only.
     *  Receives only security fixes.
 *  0.2.7386-beta20.3-p10
     *  Older stable version which is supported on Unix-like systems only.
     *  Receives only security fixes.
 *  0.4 (SVN trunk)
     *  development
     *  security updates
     *  playback fixes
     *  new features
     *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.

For general discussion, please use the forums at <https://forum.openmpt.org/>.

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.

[libopenmpt-announce] libopenmpt release announcement 2017-08-12

[<mod...@li...>]

libopenmpt release announcement 2017-08-12
==========================================


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.2.8760-beta27 (2017-08-12)
---------------------------------------

  *  [**Bug**] libmodplug: The CSoundFile::Read function in the emulated
     libmodplug C++ API returned the wrong value, causing qmmp (and possibly
     other software) to crash.

  *  The ProTracker note delay quirk should not retrigger already 
stopped samples
     (fixes "Subi loses the Cops" by Subi).
  *  ProTracker portamento between already stopped sample and another 
sample kept
     playing the old sample (fixes "anarchy-main" by Jester).
  *  Playback fix for instruments with custom tunings and transposed 
note maps
     in MPTM format.
  *  ProTracker quirk: If there is a note with a out-of-range note 
delay, it is
     played on the next row (with an instant portamento), unless there 
is a new
     note on that row.
  *  ProTracker quirk: Apply tempo changes after the first tick of the row.

The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .

Source code download links:
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8760-beta27-autotools.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8760-beta27.tar.gz>
  * 
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8760-beta27-windows.zip>

Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/> .


___


None of the fixes that went into libopenmpt 0.2.8760-beta27 are security 
fixes.
Thus, the libopenmpt-0.2.7561-beta20.5 and libopenmpt-0.2.7386-beta20.3 
lines
require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.2.8760-beta27
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.3 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce> .

The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/> .

For general discussion, please use the forums at 
<https://forum.openmpt.org/> .

For bug reports, please use the bug tracker at <https://bugs.openmpt.org/> .

For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...> .

[libopenmpt-announce] libopenmpt security announcement 2017-07-07

[<mod...@li...>]

libopenmpt security announcement 2017-07-07
===========================================


This is the first post to the libopenmpt-announce mailing list. From now 
on, we
will post release and security announcements here in addition to the 
website.


___


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt-0.2.8461-beta26 (2017-07-07)
---------------------------------------

  *  [**Bug**] Possible crashes with malformed PLM and PSM files.
  *  [**Bug**] mktime() and localtime() were used for song date parsing.
     These functions are not guaranteed to be thread-safe by the standard.
     Furthermore, some standard library implementations are buggy and 
may cause
     the program to abort in out-of-memory situations. These functions 
are now no
     longer used.

  *  Loops shorter than four sample points at the end of a sample could 
cause the
     sample data before the loop to become corrupted.

The changelog for older versions can be found at
https://lib.openmpt.org/doc/changelog.html .

Source code download links:
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8461-beta26-autotools.tar.gz
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8461-beta26.tar.gz
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8461-beta26-windows.zip

Documentation and binary downloads can be found at the libopenmpt website at
https://lib.openmpt.org/libopenmpt/ .


___


The OpenMPT/libopenmpt project updated the following libopenmpt versions 
with
security fixes:


libopenmpt-0.2.7561-beta20.5-p7 (2017-07-07)
--------------------------------------------

  *  r8459: [Sec] Heap buffer overflow in sample loading from malformed 
files
     (PSM).
  *  r8430: [Sec] Race condition in multi-threaded use (IT, MOD, DMF).
  *  r8427: [Sec] Out-of-bounds read (PLM).

The following individual patches fix the mentioned issues (these patches 
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7561-beta20.5 source release):

  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p1-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p2-excessive-cpu-consumption-on-malformed-files-ams.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p3-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p4-race-condition-in-multi-threaded-use-it.patch 
(already announced previously)

  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p5-out-of-bounds-read-plm.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p6-race-condition-in-multi-threaded-use-it-mod-dmf.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p7-heap-buffer-overflow-in-sample-loading-from-malformed-files-psm.patch


libopenmpt-0.2.7386-beta20.3-p10 (2017-07-07)
---------------------------------------------

  *  r8460: [Sec] Heap buffer overflow in sample loading from malformed 
files
     (PSM).
  *  r8431: [Sec] Race condition in multi-threaded use (IT, MOD, DMF).
  *  r8428: [Sec] Out-of-bounds read (PLM).

The following individual patches fix the mentioned issues (these patches 
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7386-beta20.3 source release):

  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p1-division-by-zero-in-tempo-calculation.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p2-infinite-loop-in-plugin-routing.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p3-excessive-cpu-consumption-on-malformed-files-dmf-mdl.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p4-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p5-excessive-cpu-consumption-on-malformed-files-ams.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p6-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch 
(already announced previously)
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p7-race-condition-in-multi-threaded-use-it.patch 
(already announced previously)

  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p8-out-of-bounds-read-plm.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p9-race-condition-in-multi-threaded-use-it-mod-dmf.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p10-heap-buffer-overflow-in-sample-loading-from-malformed-files-psm.patch


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.2.8461-beta26
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.7561-beta20.5-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p10
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.3 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the new versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce .

The libopenmpt website is at https://lib.openmpt.org/libopenmpt/ .

For general discussion, please use the forums at 
https://forum.openmpt.org/ .

For bug reports, please use the bug tracker at https://bugs.openmpt.org/ .

For security-related reports or discussion, you may also use the libopenmpt
security contact address at sec...@op... .

[libopenmpt-announce] libopenmpt release announcement 2017-07-04

[<mod...@li...>]

libopenmpt release announcement 2017-07-04
==========================================


The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt 0.2.8414-beta25 (2017-07-02)
---------------------------------------

  *  PT36: Enable VBlank timing as specified in file and read song comment.
  *  M15: Loosen heuristics to allow a few more semi-damaged files to play.
  *  MT2: If there were instruments with both sample and plugin assignments,
     sample data was not read correctly.

The changelog for older versions can be found at
https://lib.openmpt.org/doc/changelog.html .

Source code download links:
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8414-beta25-autotools.tar.gz
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8414-beta25.tar.gz
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8414-beta25-windows.zip

Documentation and binary downloads can be found at the libopenmpt website at
https://lib.openmpt.org/libopenmpt/ .


___


None of the fixes that went into libopenmpt 0.2.8414-beta25 are security 
fixes.
Thus, the libopenmpt-0.2.7561-beta20.5 and libopenmpt-0.2.7386-beta20.3 
lines
require no update.


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.2.8414-beta25
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.7561-beta20.5-p4
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.3 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the newest versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce .

The libopenmpt website is at https://lib.openmpt.org/libopenmpt/ .

For general discussion, please use the forums at 
https://forum.openmpt.org/ .

For bug reports, please use the bug tracker at https://bugs.openmpt.org/ .

For security-related reports or discussion, you may also use the libopenmpt
security contact address at sec...@op... .

[libopenmpt-announce] libopenmpt announcement 2017-06-02

[<mod...@li...>]

libopenmpt announcement 2017-06-02
==================================


This is the first post to the libopenmpt-announce mailing list. From now 
on, we
will post release and security announcements here in addition to the 
website.


___



The OpenMPT/libopenmpt project released the latest stable libopenmpt 
version:


libopenmpt-0.2.8190-beta24 (2017-05-22)
---------------------------------------

  *  [**Bug**] localtime() was used to determine the version of Schism 
Tracker
     used to save IT and S3M files. This function is not guaranteed to be
     thread-safe by the standard and is now no longer used.
  *  [**Bug**] Compilation with GCC 4.1 was broken since 0.2-beta20.5.

  *  Improvements to seeking: Channel panning was not always updated from
     instruments / samples when seeking, and out-of-range global volume 
was not
     applied correctly in some formats.
  *  Work-around for reading MIDI macros and plugin settings in some 
malformed IT
     files written by old UNMO3 versions.
  *  Improve tracker detection in IT format.

The changelog for older versions can be found at
https://lib.openmpt.org/doc/changelog.html .

Source code download links:
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8190-beta24-autotools.tar.gz
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8190-beta24.tar.gz
  * 
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8190-beta24-windows.zip

Documentation and binary downloads can be found at the libopenmpt website at
https://lib.openmpt.org/libopenmpt/ .


___


The OpenMPT/libopenmpt project updated the following libopenmpt versions 
with
security fixes:


libopenmpt-0.2.7561-beta20.5-p4 (2017-06-02)
--------------------------------------------

  *  r8248: [Sec] Race condition in multi-threaded use (IT).
  *  r8247: [Sec] Invalid memory read when applying NNAs to effect plugins.
  *  r8246: [Sec] Excessive CPU consumption on malformed files (AMS).
  *  r8245: [Sec] Theoretical NULL pointer dereference during 
out-of-memory while
     error handling.

The following individual patches fix the mentioned issues (these patches 
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7561-beta20.5 source release):

  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p1-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p2-excessive-cpu-consumption-on-malformed-files-ams.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p3-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p4-race-condition-in-multi-threaded-use-it.patch


libopenmpt-0.2.7386-beta20.3-p7 (2017-06-02)
--------------------------------------------

  *  r8241: [Sec] Race condition in multi-threaded use (IT).
  *  r8240: [Sec] Invalid memory read when applying NNAs to effect plugins.
  *  r8239: [Sec] Excessive CPU consumption on malformed files (AMS).
  *  r8238: [Sec] Theoretical NULL pointer dereference during 
out-of-memory while
     error handling.
  *  r8237: [Sec] Excessive CPU consumption on malformed files (DMF, MDL).
  *  r8236: [Sec] Infinite loop in plugin routing.
  *  r8235: [Sec] Division by zero in tempo calculation.

The following individual patches fix the mentioned issues (these patches 
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7386-beta20.3 source release):

  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p1-division-by-zero-in-tempo-calculation.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p2-infinite-loop-in-plugin-routing.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p3-excessive-cpu-consumption-on-malformed-files-dmf-mdl.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p4-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p5-excessive-cpu-consumption-on-malformed-files-ams.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p6-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch
  * 
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p7-race-condition-in-multi-threaded-use-it.patch


___


The following libopenmpt versions are currently supported with security 
fixes by
the OpenMPT/libopenmpt project:

  *  0.2.8190-beta24
      *  Current stable version.
      *  Receives security updates.
      *  Receives minor playback fixes.
  *  0.2.7561-beta20.5-p4
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.2.7386-beta20.3-p7
      *  Older stable version which is supported on Unix-like systems only.
      *  Receives only security fixes.
  *  0.3 (SVN trunk)
      *  development
      *  security updates
      *  playback fixes
      *  new features
      *  new file formats


Please update to the new versions.


___


This is an announcement-only mailing list. You cannot post here. This 
mailing
list's website is at
https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce .

The libopenmpt website is at https://lib.openmpt.org/libopenmpt/ .

For general discussion, please use the forums at 
https://forum.openmpt.org/ .

For bug reports, please use the bug tracker at https://bugs.openmpt.org/ .

For security-related reports or discussion, you may also use the libopenmpt
security contact address at sec...@op... .