Menu
▾
▴
modplug-libopenmpt-announce — libopenmpt release and security announcements
You can subscribe to this list here.
| 2017 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
(2) |
Aug
(1) |
Sep
(1) |
Oct
(1) |
Nov
(2) |
Dec
(1) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2018 |
Jan
(2) |
Feb
(1) |
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <mod...@li...> - 2018-03-05 12:35:34
|
modplug-libopenmpt-announce list shutdown ========================================= tl;dr: The modplug-libopenmpt-announce list is shutting down effective immediately. Please use <https://lib.openmpt.org/libopenmpt/feed.xml> instead. The modplug-libopenmpt-announce mailing list is hosted on SourceForge. SourceForge has experienced repeated service outages in recent times, which have either been delaying mail delivery for multiple days or in some cases even silently discarded mails. As SourceForge is apparently unable to provide a reliable service, the libopenmpt project cannot trust this infrastructure any more. We cannot use this mailing list to issue security announcements any more because we have no confidence that the announcements actually reach the people who are subscribed to the list. The libopenmpt project will continue to issue security and release announcements via our Atom feed at <https://lib.openmpt.org/libopenmpt/feed.xml>. Please unsubscribe from this list. It is dead effective immediately. Regards, Jörn 'manx' Heusipp Johannes ‘Saga Musix’ Schultz |
|
From: <mod...@li...> - 2018-02-03 19:57:21
|
libopenmpt security update 0.3.6
================================
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.3.6 (2018-02-03)
-----------------------------
* [**Sec**] Possible out-of-bounds memory read with malformed STP files.
(r9576)
* [**Bug**] Small memory leak with malformed STP files.
* STM: Accurate emulation of Scream Tracker 2 tempo mode.
* STM: Better support for early format revisions (no such files have been
found in the wild, though).
* Fine volume slides are now supported when seeking with
seek.sync_samples=1
enabled.
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.6+release.autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.6+release.makefile.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.6+release.msvc.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.
___
The security issue fixed in libopenmpt 0.3 does not affect the earlier
libopenmpt 0.2 branch. Thus, the libopenmpt 0.2.9542-beta29, libopenmpt
0.2.7561-beta20.5 and libopenmpt 0.2.7386-beta20.3 lines require no update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.3.6
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.9542-beta29
* Old stable version.
* Receives security updates.
* Receives trivial bug fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.4 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.
For general discussion, please use the forums at
<https://forum.openmpt.org/>.
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.
|
|
From: <mod...@li...> - 2018-01-28 19:34:18
|
libopenmpt release 0.3.5 and 0.2.9542-beta29
============================================
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.3.5 (2018-01-28)
-----------------------------
* [**Bug**] VS2015 project files targetting Windows XP did not set
compiler
option `/Zc:threadSafeInit-` which could cause at least the player
plugins
`in_openmpt` and `xmp-openmpt` to fail to load.
* J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
since libopenmpt-0.2.6401-beta17.
* STM: Last character of sample name was missing.
* ParamEq plugin center frequency was not limited correctly.
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.makefile.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.msvc.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.
___
The OpenMPT/libopenmpt project also released an update to the old
libopenmpt 0.2
stable branch:
libopenmpt 0.2.9542-beta29 (2018-01-28)
---------------------------------------
* [**Bug**] VS2015 project files targetting Windows XP did not set
compiler
option `/Zc:threadSafeInit-` which could cause at least the player
plugins
`in_openmpt` and `xmp-openmpt` to fail to load.
* J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
since libopenmpt-0.2.6401-beta17.
* STM: Last character of sample name was missing.
* ParamEq plugin center frequency was not limited correctly.
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-windows.zip>
___
None of the fixes that went into libopenmpt 0.3.5 and/or libopenmpt
0.2.9542-beta29 are security fixes. Thus, the libopenmpt
0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.3.5
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.9542-beta29
* Old stable version.
* Receives security updates.
* Receives trivial bug fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.4 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.
For general discussion, please use the forums at
<https://forum.openmpt.org/>.
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.
|
|
From: <mod...@li...> - 2018-01-28 19:34:10
|
libopenmpt release 0.3.5 and 0.2.9542-beta29
============================================
The previous mail contained wrong changelog entries for libopenmpt 0.3.5.
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.3.5 (2018-01-28)
-----------------------------
* [**New**] Support MOD files from the Inconexia demo by Iguana.
* [**Bug**] xmp-openmpt: Saved settings were not applied instantly.
* XM E60 loop bug was not considered in song length calucation.
* Tighten M15 and MOD file rejection heuristics.
* J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
since libopenmpt-0.2.6401-beta17.
* STM: Last character of sample name was missing.
* ParamEq plugin center frequency was not limited correctly.
* libopenmpt_ext C API was not included in the documentation.
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.makefile.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.5+release.msvc.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.
___
The OpenMPT/libopenmpt project also released an update to the old
libopenmpt 0.2
stable branch:
libopenmpt 0.2.9542-beta29 (2018-01-28)
---------------------------------------
* [**Bug**] VS2015 project files targetting Windows XP did not set
compiler
option `/Zc:threadSafeInit-` which could cause at least the player
plugins
`in_openmpt` and `xmp-openmpt` to fail to load.
* J2B: Ignore frequency limits from file header. Fixes Medivo.j2b, broken
since libopenmpt-0.2.6401-beta17.
* STM: Last character of sample name was missing.
* ParamEq plugin center frequency was not limited correctly.
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9542-beta29-windows.zip>
___
None of the fixes that went into libopenmpt 0.3.5 and/or libopenmpt
0.2.9542-beta29 are security fixes. Thus, the libopenmpt
0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.3.5
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.9542-beta29
* Old stable version.
* Receives security updates.
* Receives trivial bug fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.4 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.
For general discussion, please use the forums at
<https://forum.openmpt.org/>.
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.
|
|
From: <mod...@li...> - 2017-12-17 19:00:12
|
libopenmpt release 0.3.4 ======================== The OpenMPT/libopenmpt project released the latest stable libopenmpt version: libopenmpt 0.3.4 (2017-12-17) ----------------------------- * IT: Fix broken volume envelopes with negative values as found in breakdwn.it by Elysis. The changelog for older versions can be found at <https://lib.openmpt.org/doc/changelog.html> . Source code download links: * <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.4+release.autotools.tar.gz> * <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.4+release.makefile.tar.gz> * <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.4+release.msvc.zip> Documentation and binary downloads can be found at the libopenmpt website at <https://lib.openmpt.org/libopenmpt/>. ___ None of the fixes that went into libopenmpt 0.3.4 are security fixes. Thus, the libopenmpt 0.2, libopenmpt 0.2.7561-beta20.5 and libopenmpt-0.2.7386-beta20.3 lines require no update. ___ The following libopenmpt versions are currently supported with security fixes by the OpenMPT/libopenmpt project: * 0.3.4 * Current stable version. * Receives security updates. * Receives minor playback fixes. * 0.2.9227-beta28 * Old stable version. * Receives security updates. * Receives trivial bug fixes. * 0.2.7561-beta20.5-p7 * Older stable version which is supported on Unix-like systems only. * Receives only security fixes. * 0.2.7386-beta20.3-p10 * Older stable version which is supported on Unix-like systems only. * Receives only security fixes. * 0.4 (SVN trunk) * development * security updates * playback fixes * new features * new file formats Please update to the newest versions. ___ This is an announcement-only mailing list. You cannot post here. This mailing list's website is at <https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>. The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>. For general discussion, please use the forums at <https://forum.openmpt.org/>. For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>. For security-related reports or discussion, you may also use the libopenmpt security contact address at <sec...@op...>. |
|
From: <mod...@li...> - 2017-11-19 10:48:20
|
libopenmpt release 0.3.3
========================
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.3.3 (2017-11-19)
-----------------------------
* [**New**] foo_openmpt: foo_openmpt now also works on Windows XP.
* [**Bug**] All VS2015 and VS2017 project files targetting Windows XP
did not
set compiler option `/Zc:threadSafeInit-` which caused at least the
player
plugins `in_openmpt` and `xmp-openmpt` to fail to load.
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.3+release.autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.3+release.makefile.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.3+release.msvc.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.
___
None of the fixes that went into libopenmpt 0.3.3 are security fixes.
Thus, the
libopenmpt 0.2.7561-beta20.5 and libopenmpt-0.2.7386 beta20.3 lines
require no
update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.3.3
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.9227-beta28
* Old stable version.
* Receives security updates.
* Receives trivial bug fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.4 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.
For general discussion, please use the forums at
<https://forum.openmpt.org/>.
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.
|
|
From: <mod...@li...> - 2017-11-04 19:21:16
|
libopenmpt release 0.3.2 and 0.2.9227-beta28
============================================
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.3.2 (2017-11-04)
-----------------------------
* [**New**] Autotools `configure` and plain `Makefile` now honor the
variable
`CXXSTDLIB_PCLIBSPRIVATE` which serves the sole purpose of listing the
standard library (or libraries) required for static linking. The
contents of
this variable will be put in `libopenmpt.pc` `Libs.private` and
used for
nothing else. See
<https://lib.openmpt.org/doc/libopenmpt_c_overview.html#libopenmpt_c_staticlinking>
.
* [**Change**] Windows bin and dev release packages now use zip archives
instead of 7z archives as it had originally been intended for the 0.3.0
release.
* [**Change**] openmpt123: The following combinations of options are not
deprecated because they made no real sense in the first place:
`--render --output`, `--ui --output-type`, `--batch --output-type`
* [**Bug**] libopenmpt did not build on Android NDK 15c (and possibly
other versions between 12b and 15c as well).
* IT: In Compatible Gxx mode, allow sample changes next to a tone
portamento
effect if a previous sample has already stopped playing.
* MOD: Slides and delayed notes are executed on every repetition of a
row with
row delay (fixes "ode to protracker").
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.2+release.autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.2+release.makefile.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.2+release.msvc.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.
___
The OpenMPT/libopenmpt project also released an update to the old
libopenmpt 0.2
stable branch:
libopenmpt 0.2.9227-beta28 (2017-11-04)
---------------------------------------
* [**Bug**] libopenmpt did not build on Android NDK 15c (and possibly
other versions between 12b and 15c as well).
* MT2 offset + delay command was not imported correctly.
* If the order list was longer than 256 items and there was a pattern
break
effect without a position jump on the last pattern of the sequence,
it did
not jump to the correct restart order.
* Tighten MOD / ICE rejection heuristics for invalid files and loosen
them in
other places to allow some valid MOD files to load.
* Some valid FAR files were rejected erroneously.
* Improved accuracy of vibrato command in DIGI / DBM files.
* IT: In Compatible Gxx mode, allow sample changes next to a tone
portamento
effect if a previous sample has already stopped playing.
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9227-beta28-autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9227-beta28.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.9227-beta28-windows.zip>
___
None of the fixes that went into libopenmpt 0.3.2 and/or libopenmpt
0.2.9227-beta28 are security fixes. Thus, the libopenmpt
0.2.7561-beta20.5 and
libopenmpt-0.2.7386 beta20.3 lines require no update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.3.2
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.9227-beta28
* Old stable version.
* Receives security updates.
* Receives trivial bug fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.4 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.
For general discussion, please use the forums at
<https://forum.openmpt.org/>.
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.
|
|
From: <mod...@li...> - 2017-10-03 10:25:58
|
Hello. Some mailing list subscribers have already received this mail, however some apparently did not. I had sent this mail originally shortly after a service outage at sourceforge which apparently was not yet completely resolved, thus some mails might have gotten eaten by the system. Note that you can also receive these updates via an Atom feed which is hosted on openmpt.org itself, and does not depend on sourceforge working correctly. The libopenmpt Atom feed is at <https://lib.openmpt.org/libopenmpt/feed.xml> . libopenmpt release 0.3.1 ======================== The OpenMPT/libopenmpt project released the latest stable libopenmpt version: libopenmpt 0.3.1 (2017-09-28) ----------------------------- Changelog since libopenmpt 0.2.6774-beta20. libopenmpt 0.3.1 * [**Bug**] Windows: libopenmpt resource did not compile for release versions. libopenmpt 0.3.0 (2017-09-27, not released) * [**New**] New error handling functionality in the C API, which in particular allows distinguishing potentially transient out-of-memory errors from parse errors during module loading. * [**New**] New API `openmpt::module::get_selected_subsong()` (C++) and `openmpt_module_get_selected_subsong()` (C). * [**New**] Faster file header probing API `openmpt::probe_file_header()` and `openmpt::probe_file_header_get_recommended_size` (C++), and `openmpt_probe_file_header()`, `openmpt_probe_file_header_without_filesize()`, `openmpt_probe_file_header_from_stream()` and `openmpt_probe_file_header_get_recommended_size()` (C). * [**New**] New API `openmpt::could_open_probability()` (C++) and `openmpt_could_open_probability()` (C). This fixes a spelling error in the old 0.2 API. * [**New**] openmpt123: openmpt123 can now open M3U, M3U8, M3UEXT, M3U8EXT and PLSv2 playlists via the `--playlist` option. * [**New**] openmpt123: openmpt123 now supports very fast file header probing via the `--probe` option. * [**New**] Libopenmpt now supports building for Windows 10 Universal (Windows Store 8.2) APIs with MSVC, and also for the older Windows Runtime APIs with MinGW-w64. * [**New**] New API header `libopenmpt_ext.h` which implements the libopenmpt extension APIs also for the C interface. * [**New**] The Reverb effect (S99 in S3M/IT/MPTM, and X99 in XM) is now implemented in libopenmpt. * [**New**] For Amiga modules, a new resampler based on the Amiga's sound characteristics has been added. It can be activated by passing the `render.resampler.emulate_amiga` ctl with a value of `1`. Non-Amiga modules are not affected by this, and setting the ctl overrides the resampler choice specified by `OPENMPT_MODULE_RENDER_INTERPOLATIONFILTER_LENGTH` or `openmpt::module::RENDER_INTERPOLATIONFILTER_LENGTH`. Support for the MOD command E0x (Set LED Filter) is also available when the Amiga resampler is enabled. * [**Change**] libopenmpt versioning changed and follows the more conventional major.minor.patch as well as the recommendations of the [SemVer](http://semver.org/) scheme now. In addition to the SemVer requirements, pre-1.0.0 versions will also honor API and ABI stability in libopenmpt (i.e. libopenmpt ignores SemVer Clause 4). * [**Change**] The output directories of the MSVC build system were changed to `bin/vs2015-shared/x86-64-win7/` (and similar) layout which allows building in the same tree with different compiler versions without overwriting other outputs. * [**Change**] The emscripten build now exports libopenmpt as 'libopenmpt' instead of the default 'Module'. * [**Change**] Android: The build system changed. The various Android.mk files have been merged into a single one which can be controlled using command line options. * [**Change**] The `Makefile` build system now passes `std=c++11` to the compiler by default. Older compilers may still work if you pass `STDCXX=c++0x` to the `make` invocation. * [**Change**] The `Makefile` option `ANCIENT=1` is gone. * [**Change**] The optional dependencies on `libltdl` or `libdl` are gone. They are no longer needed for any functionality. * [**Regression**] Compiling client code using the C++ API now requires a compiler running in C++11 mode. * [**Regression**] Support for GCC 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7 has been removed. * [**Regression**] Support for Clang 3.0, 3.1, 3.2, 3.3 has been removed. * [**Regression**] Support for Emscripten versions older than 1.31.0 has been removed. * [**Regression**] Support for Android NDK versions older than 11 has been removed. * [**Regression**] Visual Studio 2008, 2010, 2012, 2013 support has been removed. * [**Regression**] Dynamic run-time loading of libmpg123 is no longer supported. Libmpg123 must be linked at link-time now. * [**Regression**] xmp-openmpt: xmp-openmpt now requires XMPlay 3.8 or later and compiling xmp-openmpt requires an appropriate XMPlay SDK with `XMPIN_FACE` >= `4`. * [**Regression**] Support for libmpg123 older than 1.13.0 has been removed. * [**Regression**] Un4seen unmo3 support has been removed. * [**Bug**] C++ API: `openmpt::exception` did not define copy and move constructors or copy and move assignment operators in libopenmpt 0.2. The compiler-generated ones were not adequate though. libopenmpt 0.3 adds the appropriate special member functions. This adds the respective symbol names to the exported ABI, which, depending on the compiler, might or might not have been there in libopenmpt 0.2. The possibly resulting possible ODR violation only affects cases that did crash in the libopenmpt 0.2 API anyway due to memory double-free, and does not cause any further problems in practice for all known platforms and compilers. * [**Bug**] The C API could crash instead of failing gracefully in out-of-memory situations. * [**Bug**] The test suite could fail on MacOSX or FreeBSD in non-fatal ways when no locale was active. * [**Bug**] `libopenmpt_stream_callbacks_fd.h` and `libopenmpt_stream_callbacks_file.h` were missing in Windows development packages. * [**Bug**] libopenmpt on Windows did not properly guard against current working directory DLL injection attacks. * [**Bug**] localtime() was used to determine the version of Schism Tracker used to save IT and S3M files. This function is not guaranteed to be thread-safe by the standard and is now no longer used. * [**Bug**] Possible crashes with malformed IT, ITP, AMS, MDL, MED, MPTM, PSM and Startrekker files. * [**Bug**] Possible hangs with malformed DBM, MPTM and PSM files. * [**Bug**] Possible hangs with malformed files containing cyclic plugin routings. * [**Bug**] Excessive loading times with malformed ITP / truncated AMS files. * [**Bug**] Plugins did not work correctly when changing the sample rate between two render calls. * [**Bug**] Possible NULL-pointer dereference read during obscure out-of-memory situations while handling exceptions in the C API. * [**Bug**] libmodplug: `libmodplug.pc` was wrong. * [**Bug**] Cross-compiling libopenmpt with autotools for Windows now properly sets `-municode` and `-mconsole` as well as all required Windows system libraries. * [**Bug**] foo_openmpt: Interpolation filter and volume ramping settings were confused in previous versions. This version resets both to the defaults. * [**Bug**] libmodplug: The CSoundFile::Read function in the emulated libmodplug C++ API returned the wrong value, causing qmmp (and possibly other software) to crash. * Support for SoundTracker Pro II (STP) and Digital Tracker (DTM) modules. * Increased accuracy of the sample position and sample rate to drift less when playing very long samples. * Various playback improvements for IT and XM files. * Channel frequency could wrap around after some excessive portamento / down in some formats since libopenmpt 0.2-beta17. * Playback improvements for S3M files made with Impulse Tracker and Schism Tracker. * ParamEq plugin emulation didn't do anything at full gain (+15dB). * All standard DMO effects are now also emulated on non-Windows and non-MSVC systems. * Added `libopenmpt_stream_callbacks_buffer.h` which adds `openmpt_stream_callbacks` support for in-memory buffers, possibly even only using a truncated prefix view into a bigger file which is useful for probing. * Avoid enabling some ProTracker-specific quirks for MOD files most likely created with ScreamTracker 3. * Tremolo effect only had half the intended strength in MOD files. * Pattern loops ending on the last row a pattern were not executed correctly in S3M files. * Work-around for reading MIDI macros and plugin settings in some malformed IT files written by old UNMO3 versions. * Improve tracker detection in IT format. * Playback fixes for 8-channel MED files * Do not set note volume to 0 on out-of-range offset in XM files. * Better import of some slide commands in SFX files. * Sample 15 in "Crew Generation" by Necros requires short loops at the beginning of the sample to not be ignored. Since we need to ignore them in some (non-ProTracker) modules, we heuristically disable the old loop sanitization behaviour based on the module channel count. * Both normal and percentage offset in PLM files were handled as percentage offset. * MT2 files with instruments that had both sample and plugin assignments were not read correctly. * Some valid FAR files were rejected erroneously. * Support for VBlank timing flag and comment field in PT36 files. * Improved accuracy of vibrato command in DIGI / DBM files. * STM: Add support for "WUZAMOD!" magic bytes and allow some slightly malformed STM files to load which were previously rejected. * Detect whether "hidden" patterns in the order list of SoundTracker modules should be taken into account or not. * Tighten heuristics for rejecting invalid 669, M15, MOD and ICE files and loosen them in other places to allow some valid MOD files to load. * Improvements to seeking: Channel panning was not always updated from instruments / samples when seeking, and out-of-range global volume was not applied correctly in some formats. * seek.sync_samples=1 did not apply PTM reverse offset effect and the volume slide part of combined volume slide + vibrato commands. * If the order list was longer than 256 items and there was a pattern break effect without a position jump on the last pattern of the sequence, it did not jump to the correct restart order. * `Makefile` has now explicit support for FreeBSD with no special option or configuration required. * openmpt123: Improved section layout in man page. * libmodplug: Added all missing C++ API symbols that are accessible via the public libmodplug header file. * Autotools build system now has options `--disable-openmpt123`, `--disable-tests` and `--disable-examples` which may be desireable when cross-compiling. * Windows binary packages now ship with libmpg123 included. The changelog for older versions can be found at <https://lib.openmpt.org/doc/changelog.html> . Source code download links: * <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.autotools.tar.gz> * <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.makefile.tar.gz> * <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.msvc.zip> Documentation and binary downloads can be found at the libopenmpt website at <https://lib.openmpt.org/libopenmpt/>. ___ Libopenmpt 0.3.1 contains all security fixes that went into libopenmpt 0.2 since the point where libopenmpt 0.2 and 0.3 branched. The libopenmpt-0.2, libopenmpt-0.2.7561-beta20.5 and libopenmpt-0.2.7386-beta20.3 lines require no update right now. ___ The following libopenmpt versions are currently supported with security fixes by the OpenMPT/libopenmpt project: * 0.3.1 * Current stable version. * Receives security updates. * Receives minor playback fixes. * 0.2.8760-beta27 * Old stable version. * Receives security updates. * 0.2.7561-beta20.5-p7 * Older stable version which is supported on Unix-like systems only. * Receives only security fixes. * 0.2.7386-beta20.3-p10 * Older stable version which is supported on Unix-like systems only. * Receives only security fixes. * 0.4 (SVN trunk) * development * security updates * playback fixes * new features * new file formats Please update to the newest versions. ___ This is an announcement-only mailing list. You cannot post here. This mailing list's website is at <https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>. The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>. For general discussion, please use the forums at <https://forum.openmpt.org/>. For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>. For security-related reports or discussion, you may also use the libopenmpt security contact address at <sec...@op...>. |
|
From: <mod...@li...> - 2017-09-29 16:12:03
|
libopenmpt release 0.3.1
========================
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.3.1 (2017-09-28)
-----------------------------
Changelog since libopenmpt 0.2.6774-beta20.
libopenmpt 0.3.1
* [**Bug**] Windows: libopenmpt resource did not compile for release versions.
libopenmpt 0.3.0 (2017-09-27, not released)
* [**New**] New error handling functionality in the C API, which in particular
allows distinguishing potentially transient out-of-memory errors from parse
errors during module loading.
* [**New**] New API `openmpt::module::get_selected_subsong()` (C++) and
`openmpt_module_get_selected_subsong()` (C).
* [**New**] Faster file header probing API `openmpt::probe_file_header()` and
`openmpt::probe_file_header_get_recommended_size` (C++), and
`openmpt_probe_file_header()`,
`openmpt_probe_file_header_without_filesize()`,
`openmpt_probe_file_header_from_stream()` and
`openmpt_probe_file_header_get_recommended_size()` (C).
* [**New**] New API `openmpt::could_open_probability()` (C++) and
`openmpt_could_open_probability()` (C). This fixes a spelling error in the
old 0.2 API.
* [**New**] openmpt123: openmpt123 can now open M3U, M3U8, M3UEXT, M3U8EXT and
PLSv2 playlists via the `--playlist` option.
* [**New**] openmpt123: openmpt123 now supports very fast file header probing
via the `--probe` option.
* [**New**] Libopenmpt now supports building for Windows 10 Universal (Windows
Store 8.2) APIs with MSVC, and also for the older Windows Runtime APIs with
MinGW-w64.
* [**New**] New API header `libopenmpt_ext.h` which implements the libopenmpt
extension APIs also for the C interface.
* [**New**] The Reverb effect (S99 in S3M/IT/MPTM, and X99 in XM) is now
implemented in libopenmpt.
* [**New**] For Amiga modules, a new resampler based on the Amiga's sound
characteristics has been added. It can be activated by passing the
`render.resampler.emulate_amiga` ctl with a value of `1`. Non-Amiga modules
are not affected by this, and setting the ctl overrides the resampler choice
specified by `OPENMPT_MODULE_RENDER_INTERPOLATIONFILTER_LENGTH` or
`openmpt::module::RENDER_INTERPOLATIONFILTER_LENGTH`. Support for the MOD
command E0x (Set LED Filter) is also available when the Amiga resampler is
enabled.
* [**Change**] libopenmpt versioning changed and follows the more conventional
major.minor.patch as well as the recommendations of the
[SemVer](http://semver.org/) scheme now. In addition to the SemVer
requirements, pre-1.0.0 versions will also honor API and ABI stability in
libopenmpt (i.e. libopenmpt ignores SemVer Clause 4).
* [**Change**] The output directories of the MSVC build system were changed to
`bin/vs2015-shared/x86-64-win7/` (and similar) layout which allows building
in the same tree with different compiler versions without overwriting other
outputs.
* [**Change**] The emscripten build now exports libopenmpt as 'libopenmpt'
instead of the default 'Module'.
* [**Change**] Android: The build system changed. The various Android.mk files
have been merged into a single one which can be controlled using command
line options.
* [**Change**] The `Makefile` build system now passes `std=c++11` to the
compiler by default. Older compilers may still work if you pass
`STDCXX=c++0x` to the `make` invocation.
* [**Change**] The `Makefile` option `ANCIENT=1` is gone.
* [**Change**] The optional dependencies on `libltdl` or `libdl` are gone.
They are no longer needed for any functionality.
* [**Regression**] Compiling client code using the C++ API now requires a
compiler running in C++11 mode.
* [**Regression**] Support for GCC 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7 has been
removed.
* [**Regression**] Support for Clang 3.0, 3.1, 3.2, 3.3 has been removed.
* [**Regression**] Support for Emscripten versions older than 1.31.0 has been
removed.
* [**Regression**] Support for Android NDK versions older than 11 has been
removed.
* [**Regression**] Visual Studio 2008, 2010, 2012, 2013 support has been
removed.
* [**Regression**] Dynamic run-time loading of libmpg123 is no longer
supported. Libmpg123 must be linked at link-time now.
* [**Regression**] xmp-openmpt: xmp-openmpt now requires XMPlay 3.8 or later
and compiling xmp-openmpt requires an appropriate XMPlay SDK with
`XMPIN_FACE` >= `4`.
* [**Regression**] Support for libmpg123 older than 1.13.0 has been removed.
* [**Regression**] Un4seen unmo3 support has been removed.
* [**Bug**] C++ API: `openmpt::exception` did not define copy and move
constructors or copy and move assignment operators in libopenmpt 0.2. The
compiler-generated ones were not adequate though. libopenmpt 0.3 adds the
appropriate special member functions. This adds the respective symbol names
to the exported ABI, which, depending on the compiler, might or might not
have been there in libopenmpt 0.2. The possibly resulting possible ODR
violation only affects cases that did crash in the libopenmpt 0.2 API anyway
due to memory double-free, and does not cause any further problems in
practice for all known platforms and compilers.
* [**Bug**] The C API could crash instead of failing gracefully in
out-of-memory situations.
* [**Bug**] The test suite could fail on MacOSX or FreeBSD in non-fatal ways
when no locale was active.
* [**Bug**] `libopenmpt_stream_callbacks_fd.h` and
`libopenmpt_stream_callbacks_file.h` were missing in Windows development
packages.
* [**Bug**] libopenmpt on Windows did not properly guard against current
working directory DLL injection attacks.
* [**Bug**] localtime() was used to determine the version of Schism Tracker
used to save IT and S3M files. This function is not guaranteed to be
thread-safe by the standard and is now no longer used.
* [**Bug**] Possible crashes with malformed IT, ITP, AMS, MDL, MED, MPTM, PSM
and Startrekker files.
* [**Bug**] Possible hangs with malformed DBM, MPTM and PSM files.
* [**Bug**] Possible hangs with malformed files containing cyclic plugin
routings.
* [**Bug**] Excessive loading times with malformed ITP / truncated AMS files.
* [**Bug**] Plugins did not work correctly when changing the sample rate
between two render calls.
* [**Bug**] Possible NULL-pointer dereference read during obscure
out-of-memory situations while handling exceptions in the C API.
* [**Bug**] libmodplug: `libmodplug.pc` was wrong.
* [**Bug**] Cross-compiling libopenmpt with autotools for Windows now properly
sets `-municode` and `-mconsole` as well as all required Windows system
libraries.
* [**Bug**] foo_openmpt: Interpolation filter and volume ramping settings were
confused in previous versions. This version resets both to the defaults.
* [**Bug**] libmodplug: The CSoundFile::Read function in the emulated
libmodplug C++ API returned the wrong value, causing qmmp (and possibly
other software) to crash.
* Support for SoundTracker Pro II (STP) and Digital Tracker (DTM) modules.
* Increased accuracy of the sample position and sample rate to drift less when
playing very long samples.
* Various playback improvements for IT and XM files.
* Channel frequency could wrap around after some excessive portamento / down
in some formats since libopenmpt 0.2-beta17.
* Playback improvements for S3M files made with Impulse Tracker and
Schism Tracker.
* ParamEq plugin emulation didn't do anything at full gain (+15dB).
* All standard DMO effects are now also emulated on non-Windows and non-MSVC
systems.
* Added `libopenmpt_stream_callbacks_buffer.h` which adds
`openmpt_stream_callbacks` support for in-memory buffers, possibly even only
using a truncated prefix view into a bigger file which is useful for
probing.
* Avoid enabling some ProTracker-specific quirks for MOD files most likely
created with ScreamTracker 3.
* Tremolo effect only had half the intended strength in MOD files.
* Pattern loops ending on the last row a pattern were not executed correctly
in S3M files.
* Work-around for reading MIDI macros and plugin settings in some malformed IT
files written by old UNMO3 versions.
* Improve tracker detection in IT format.
* Playback fixes for 8-channel MED files
* Do not set note volume to 0 on out-of-range offset in XM files.
* Better import of some slide commands in SFX files.
* Sample 15 in "Crew Generation" by Necros requires short loops at the
beginning of the sample to not be ignored. Since we need to ignore them in
some (non-ProTracker) modules, we heuristically disable the old loop
sanitization behaviour based on the module channel count.
* Both normal and percentage offset in PLM files were handled as percentage
offset.
* MT2 files with instruments that had both sample and plugin assignments were
not read correctly.
* Some valid FAR files were rejected erroneously.
* Support for VBlank timing flag and comment field in PT36 files.
* Improved accuracy of vibrato command in DIGI / DBM files.
* STM: Add support for "WUZAMOD!" magic bytes and allow some slightly
malformed STM files to load which were previously rejected.
* Detect whether "hidden" patterns in the order list of SoundTracker modules
should be taken into account or not.
* Tighten heuristics for rejecting invalid 669, M15, MOD and ICE files and
loosen them in other places to allow some valid MOD files to load.
* Improvements to seeking: Channel panning was not always updated from
instruments / samples when seeking, and out-of-range global volume was not
applied correctly in some formats.
* seek.sync_samples=1 did not apply PTM reverse offset effect and the volume
slide part of combined volume slide + vibrato commands.
* If the order list was longer than 256 items and there was a pattern break
effect without a position jump on the last pattern of the sequence, it did
not jump to the correct restart order.
* `Makefile` has now explicit support for FreeBSD with no special option or
configuration required.
* openmpt123: Improved section layout in man page.
* libmodplug: Added all missing C++ API symbols that are accessible via the
public libmodplug header file.
* Autotools build system now has options `--disable-openmpt123`,
`--disable-tests` and `--disable-examples` which may be desireable when
cross-compiling.
* Windows binary packages now ship with libmpg123 included.
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
* <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.autotools.tar.gz>
* <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.makefile.tar.gz>
* <https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.3.1+release.msvc.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/>.
___
Libopenmpt 0.3.1 contains all security fixes that went into libopenmpt 0.2 since
the point where libopenmpt 0.2 and 0.3 branched.
The libopenmpt-0.2, libopenmpt-0.2.7561-beta20.5 and
libopenmpt-0.2.7386-beta20.3 lines require no update right now.
___
The following libopenmpt versions are currently supported with security fixes by
the OpenMPT/libopenmpt project:
* 0.3.1
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.8760-beta27
* Old stable version.
* Receives security updates.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.4 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce>.
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/>.
For general discussion, please use the forums at <https://forum.openmpt.org/>.
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/>.
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...>.
|
|
From: <mod...@li...> - 2017-08-12 16:45:49
|
libopenmpt release announcement 2017-08-12
==========================================
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.2.8760-beta27 (2017-08-12)
---------------------------------------
* [**Bug**] libmodplug: The CSoundFile::Read function in the emulated
libmodplug C++ API returned the wrong value, causing qmmp (and possibly
other software) to crash.
* The ProTracker note delay quirk should not retrigger already
stopped samples
(fixes "Subi loses the Cops" by Subi).
* ProTracker portamento between already stopped sample and another
sample kept
playing the old sample (fixes "anarchy-main" by Jester).
* Playback fix for instruments with custom tunings and transposed
note maps
in MPTM format.
* ProTracker quirk: If there is a note with a out-of-range note
delay, it is
played on the next row (with an instant portamento), unless there
is a new
note on that row.
* ProTracker quirk: Apply tempo changes after the first tick of the row.
The changelog for older versions can be found at
<https://lib.openmpt.org/doc/changelog.html> .
Source code download links:
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8760-beta27-autotools.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8760-beta27.tar.gz>
*
<https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8760-beta27-windows.zip>
Documentation and binary downloads can be found at the libopenmpt website at
<https://lib.openmpt.org/libopenmpt/> .
___
None of the fixes that went into libopenmpt 0.2.8760-beta27 are security
fixes.
Thus, the libopenmpt-0.2.7561-beta20.5 and libopenmpt-0.2.7386-beta20.3
lines
require no update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.2.8760-beta27
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.3 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
<https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce> .
The libopenmpt website is at <https://lib.openmpt.org/libopenmpt/> .
For general discussion, please use the forums at
<https://forum.openmpt.org/> .
For bug reports, please use the bug tracker at <https://bugs.openmpt.org/> .
For security-related reports or discussion, you may also use the libopenmpt
security contact address at <sec...@op...> .
|
|
From: <mod...@li...> - 2017-07-07 13:41:40
|
libopenmpt security announcement 2017-07-07
===========================================
This is the first post to the libopenmpt-announce mailing list. From now
on, we
will post release and security announcements here in addition to the
website.
___
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt-0.2.8461-beta26 (2017-07-07)
---------------------------------------
* [**Bug**] Possible crashes with malformed PLM and PSM files.
* [**Bug**] mktime() and localtime() were used for song date parsing.
These functions are not guaranteed to be thread-safe by the standard.
Furthermore, some standard library implementations are buggy and
may cause
the program to abort in out-of-memory situations. These functions
are now no
longer used.
* Loops shorter than four sample points at the end of a sample could
cause the
sample data before the loop to become corrupted.
The changelog for older versions can be found at
https://lib.openmpt.org/doc/changelog.html .
Source code download links:
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8461-beta26-autotools.tar.gz
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8461-beta26.tar.gz
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8461-beta26-windows.zip
Documentation and binary downloads can be found at the libopenmpt website at
https://lib.openmpt.org/libopenmpt/ .
___
The OpenMPT/libopenmpt project updated the following libopenmpt versions
with
security fixes:
libopenmpt-0.2.7561-beta20.5-p7 (2017-07-07)
--------------------------------------------
* r8459: [Sec] Heap buffer overflow in sample loading from malformed
files
(PSM).
* r8430: [Sec] Race condition in multi-threaded use (IT, MOD, DMF).
* r8427: [Sec] Out-of-bounds read (PLM).
The following individual patches fix the mentioned issues (these patches
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7561-beta20.5 source release):
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p1-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p2-excessive-cpu-consumption-on-malformed-files-ams.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p3-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p4-race-condition-in-multi-threaded-use-it.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p5-out-of-bounds-read-plm.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p6-race-condition-in-multi-threaded-use-it-mod-dmf.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p7-heap-buffer-overflow-in-sample-loading-from-malformed-files-psm.patch
libopenmpt-0.2.7386-beta20.3-p10 (2017-07-07)
---------------------------------------------
* r8460: [Sec] Heap buffer overflow in sample loading from malformed
files
(PSM).
* r8431: [Sec] Race condition in multi-threaded use (IT, MOD, DMF).
* r8428: [Sec] Out-of-bounds read (PLM).
The following individual patches fix the mentioned issues (these patches
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7386-beta20.3 source release):
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p1-division-by-zero-in-tempo-calculation.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p2-infinite-loop-in-plugin-routing.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p3-excessive-cpu-consumption-on-malformed-files-dmf-mdl.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p4-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p5-excessive-cpu-consumption-on-malformed-files-ams.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p6-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p7-race-condition-in-multi-threaded-use-it.patch
(already announced previously)
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p8-out-of-bounds-read-plm.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p9-race-condition-in-multi-threaded-use-it-mod-dmf.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p10-heap-buffer-overflow-in-sample-loading-from-malformed-files-psm.patch
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.2.8461-beta26
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.7561-beta20.5-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p10
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.3 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the new versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce .
The libopenmpt website is at https://lib.openmpt.org/libopenmpt/ .
For general discussion, please use the forums at
https://forum.openmpt.org/ .
For bug reports, please use the bug tracker at https://bugs.openmpt.org/ .
For security-related reports or discussion, you may also use the libopenmpt
security contact address at sec...@op... .
|
|
From: <mod...@li...> - 2017-07-04 09:19:36
|
libopenmpt release announcement 2017-07-04
==========================================
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt 0.2.8414-beta25 (2017-07-02)
---------------------------------------
* PT36: Enable VBlank timing as specified in file and read song comment.
* M15: Loosen heuristics to allow a few more semi-damaged files to play.
* MT2: If there were instruments with both sample and plugin assignments,
sample data was not read correctly.
The changelog for older versions can be found at
https://lib.openmpt.org/doc/changelog.html .
Source code download links:
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8414-beta25-autotools.tar.gz
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8414-beta25.tar.gz
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8414-beta25-windows.zip
Documentation and binary downloads can be found at the libopenmpt website at
https://lib.openmpt.org/libopenmpt/ .
___
None of the fixes that went into libopenmpt 0.2.8414-beta25 are security
fixes.
Thus, the libopenmpt-0.2.7561-beta20.5 and libopenmpt-0.2.7386-beta20.3
lines
require no update.
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.2.8414-beta25
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.7561-beta20.5-p4
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.3 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the newest versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce .
The libopenmpt website is at https://lib.openmpt.org/libopenmpt/ .
For general discussion, please use the forums at
https://forum.openmpt.org/ .
For bug reports, please use the bug tracker at https://bugs.openmpt.org/ .
For security-related reports or discussion, you may also use the libopenmpt
security contact address at sec...@op... .
|
|
From: <mod...@li...> - 2017-06-02 13:44:39
|
libopenmpt announcement 2017-06-02
==================================
This is the first post to the libopenmpt-announce mailing list. From now
on, we
will post release and security announcements here in addition to the
website.
___
The OpenMPT/libopenmpt project released the latest stable libopenmpt
version:
libopenmpt-0.2.8190-beta24 (2017-05-22)
---------------------------------------
* [**Bug**] localtime() was used to determine the version of Schism
Tracker
used to save IT and S3M files. This function is not guaranteed to be
thread-safe by the standard and is now no longer used.
* [**Bug**] Compilation with GCC 4.1 was broken since 0.2-beta20.5.
* Improvements to seeking: Channel panning was not always updated from
instruments / samples when seeking, and out-of-range global volume
was not
applied correctly in some formats.
* Work-around for reading MIDI macros and plugin settings in some
malformed IT
files written by old UNMO3 versions.
* Improve tracker detection in IT format.
The changelog for older versions can be found at
https://lib.openmpt.org/doc/changelog.html .
Source code download links:
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8190-beta24-autotools.tar.gz
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8190-beta24.tar.gz
*
https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.2.8190-beta24-windows.zip
Documentation and binary downloads can be found at the libopenmpt website at
https://lib.openmpt.org/libopenmpt/ .
___
The OpenMPT/libopenmpt project updated the following libopenmpt versions
with
security fixes:
libopenmpt-0.2.7561-beta20.5-p4 (2017-06-02)
--------------------------------------------
* r8248: [Sec] Race condition in multi-threaded use (IT).
* r8247: [Sec] Invalid memory read when applying NNAs to effect plugins.
* r8246: [Sec] Excessive CPU consumption on malformed files (AMS).
* r8245: [Sec] Theoretical NULL pointer dereference during
out-of-memory while
error handling.
The following individual patches fix the mentioned issues (these patches
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7561-beta20.5 source release):
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p1-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p2-excessive-cpu-consumption-on-malformed-files-ams.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p3-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7561-beta20.5/libopenmpt-0.2.7561-beta20.5-secfix-p4-race-condition-in-multi-threaded-use-it.patch
libopenmpt-0.2.7386-beta20.3-p7 (2017-06-02)
--------------------------------------------
* r8241: [Sec] Race condition in multi-threaded use (IT).
* r8240: [Sec] Invalid memory read when applying NNAs to effect plugins.
* r8239: [Sec] Excessive CPU consumption on malformed files (AMS).
* r8238: [Sec] Theoretical NULL pointer dereference during
out-of-memory while
error handling.
* r8237: [Sec] Excessive CPU consumption on malformed files (DMF, MDL).
* r8236: [Sec] Infinite loop in plugin routing.
* r8235: [Sec] Division by zero in tempo calculation.
The following individual patches fix the mentioned issues (these patches
must
**all** be applied sequentially **on top** of the original
libopenmpt-0.2.7386-beta20.3 source release):
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p1-division-by-zero-in-tempo-calculation.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p2-infinite-loop-in-plugin-routing.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p3-excessive-cpu-consumption-on-malformed-files-dmf-mdl.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p4-theoretical-null-pointer-dereference-during-out-of-memory-while-error-handling.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p5-excessive-cpu-consumption-on-malformed-files-ams.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p6-invalid-memory-read-when-applying-nnas-to-effect-plugins.patch
*
https://lib.openmpt.org/files/libopenmpt/secfix/libopenmpt-0.2.7386-beta20.3/libopenmpt-0.2.7386-beta20.3-secfix-p7-race-condition-in-multi-threaded-use-it.patch
___
The following libopenmpt versions are currently supported with security
fixes by
the OpenMPT/libopenmpt project:
* 0.2.8190-beta24
* Current stable version.
* Receives security updates.
* Receives minor playback fixes.
* 0.2.7561-beta20.5-p4
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.2.7386-beta20.3-p7
* Older stable version which is supported on Unix-like systems only.
* Receives only security fixes.
* 0.3 (SVN trunk)
* development
* security updates
* playback fixes
* new features
* new file formats
Please update to the new versions.
___
This is an announcement-only mailing list. You cannot post here. This
mailing
list's website is at
https://lists.sourceforge.net/lists/listinfo/modplug-libopenmpt-announce .
The libopenmpt website is at https://lib.openmpt.org/libopenmpt/ .
For general discussion, please use the forums at
https://forum.openmpt.org/ .
For bug reports, please use the bug tracker at https://bugs.openmpt.org/ .
For security-related reports or discussion, you may also use the libopenmpt
security contact address at sec...@op... .
|
