Register | Log in

libopenmpt

Choose email to subscribe with

general

source: libopenmpt (main)
version: 0.4.10-1
maintainer: Debian Multimedia Maintainers (archive) (DMD)
uploaders: James Cowgill [DMD]
arch: all any
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 0.2.7386~beta20.3-3+deb9u3
stable: 0.4.3-1
testing: 0.4.10-1
unstable: 0.4.10-1

versioned links

0.2.7386~beta20.3-3+deb9u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.4.10-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libopenmpt-dev
libopenmpt-doc
libopenmpt-modplug-dev
libopenmpt-modplug1
libopenmpt0 (2 bugs: 0, 2, 0, 0)
openmpt123

action needed

A new upstream version is available: 0.4.11 high

A new upstream version 0.4.11 is available, you should consider packaging it.

Created: 2019-12-26 Last update: 2020-01-17 17:31

2 security issues in buster high

There are 2 open security issues in buster.

1 important issue:

CVE-2019-17113: In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.

1 issue skipped by the security teams:

CVE-2019-14380: libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.

Please fix them.

Created: 2019-08-01 Last update: 2019-11-02 08:59

4 security issues in stretch high

There are 4 open security issues in stretch.

1 important issue:

CVE-2019-17113: In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.

3 issues skipped by the security teams:

CVE-2018-20861: libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
CVE-2018-20860: libopenmpt before 0.3.13 allows a crash with malformed MED files.
CVE-2018-11710: soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.

Please fix them.

Created: 2018-04-11 Last update: 2019-11-02 08:59

Depends on packages which need a new maintainer normal

The packages that libopenmpt depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2019-11-22 Last update: 2020-01-17 21:02

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2019-04-01 Last update: 2020-01-17 20:01

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

news

[2019-11-02] libopenmpt 0.4.10-1 MIGRATED to testing (Debian testing watch)
[2019-10-30] Accepted libopenmpt 0.4.10-1 (source) into unstable (James Cowgill)
[2019-10-06] libopenmpt 0.4.9-1 MIGRATED to testing (Debian testing watch)
[2019-10-04] Accepted libopenmpt 0.4.9-1 (source) into unstable (James Cowgill)
[2019-10-03] libopenmpt 0.4.8-1 MIGRATED to testing (Debian testing watch)
[2019-09-30] Accepted libopenmpt 0.4.8-1 (source) into unstable (James Cowgill)
[2019-09-27] libopenmpt 0.4.7-1 MIGRATED to testing (Debian testing watch)
[2019-09-23] Accepted libopenmpt 0.4.7-1 (source) into unstable (James Cowgill)
[2019-08-13] libopenmpt 0.4.6-1 MIGRATED to testing (Debian testing watch)
[2019-08-11] Accepted libopenmpt 0.4.6-1 (source) into unstable (James Cowgill)
[2019-07-18] libopenmpt 0.4.5-1 MIGRATED to testing (Debian testing watch)
[2019-07-15] Accepted libopenmpt 0.4.5-1 (source) into unstable (James Cowgill)
[2019-02-25] libopenmpt 0.4.3-1 MIGRATED to testing (Debian testing watch)
[2019-02-15] Accepted libopenmpt 0.4.3-1 (source) into unstable (James Cowgill)
[2019-01-25] libopenmpt 0.4.2-1 MIGRATED to testing (Debian testing watch)
[2019-01-23] Accepted libopenmpt 0.4.2-1 (source) into unstable (James Cowgill)
[2019-01-10] libopenmpt 0.4.1-1 MIGRATED to testing (Debian testing watch)
[2019-01-07] Accepted libopenmpt 0.4.1-1 (source) into unstable (James Cowgill)
[2018-12-27] libopenmpt 0.4.0-1 MIGRATED to testing (Debian testing watch)
[2018-12-24] Accepted libopenmpt 0.4.0-1 (source) into unstable (James Cowgill)
[2018-10-24] libopenmpt 0.3.13-1 MIGRATED to testing (Debian testing watch)
[2018-10-24] libopenmpt 0.3.13-1 MIGRATED to testing (Debian testing watch)
[2018-10-22] Accepted libopenmpt 0.3.13-1 (source) into unstable (James Cowgill)
[2018-09-26] libopenmpt 0.3.12-1 MIGRATED to testing (Debian testing watch)
[2018-09-24] Accepted libopenmpt 0.3.12-1 (source) into unstable (James Cowgill)
[2018-07-31] libopenmpt 0.3.11-1 MIGRATED to testing (Debian testing watch)
[2018-07-29] Accepted libopenmpt 0.3.11-1 (source) into unstable (James Cowgill)
[2018-07-14] Accepted libopenmpt 0.2.7386~beta20.3-3+deb9u3 (source) into proposed-updates->stable-new, proposed-updates (James Cowgill)
[2018-06-19] libopenmpt 0.3.10-1 MIGRATED to testing (Debian testing watch)
[2018-06-17] Accepted libopenmpt 0.3.10-1 (source) into unstable (James Cowgill)

1
2

bugs [bug history graph]

all: 3
RC: 0
I&N: 2
M&W: 1
F&P: 0
patch: 2

links

homepage
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.4.10-1build3

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing