This update for libopenmpt fixes the following issues:
Various bugfix and stability issues were fixed, some of those might have
security impact.
libopenmpt was updated to 0.3.28:
* Fixed excessive memory consumption with malformed files in various
formats.
Changes in 0.3.27:
* AMS: Avoid allocating excessive amount of memory for compressed song
message in malformed files.
* S3M: Some samples were imported with a too high sample rate if module
was saved with Scream Tracker 3.
Changes in 0.3.26:
* DMF: Improve import of finetune effect with parameters larger than +/-15.
Changes in 0.3.25:
* AMS: An upper bound for uncompressed sample size is now established to
avoid memory exhaustion from malformed files.
* MO3: Avoid certain ModPlug hacks from being fixed up twice, which could
lead to e.g. very narrow pan swing range for old OpenMPT IT files saved
with a recent MO3 encoder version.
* IMF: Instrument...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2021-1914=1
- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):
libmodplug-devel-0.3.28-2.13.1
libmodplug1-0.3.28-2.13.1
libmodplug1-debuginfo-0.3.28-2.13.1
libopenmpt-debugsource-0.3.28-2.13.1
libopenmpt-devel-0.3.28-2.13.1
libopenmpt0-0.3.28-2.13.1
libopenmpt0-debuginfo-0.3.28-2.13.1
libopenmpt_modplug1-0.3.28-2.13.1
libopenmpt_modplug1-debuginfo-0.3.28-2.13.1
openmpt123-0.3.28-2.13.1
openmpt123-debuginfo-0.3.28-2.13.1
- openSUSE Leap 15.3 (x86_64):
libmodplug1-32bit-0.3.28-2.13.1
libmodplug1-32bit-debuginfo-0.3.28-2.13.1
libopenmpt0-32bit-0.3.28-2.13.1
libopenmpt0-32bit-debuginfo-0.3.28-2.13.1
libopenmpt_modplug1-32bit-0.3.28-2.13.1
libopenmpt_modplug1-32bit-debuginfo-0.3.28-2.13.1
https://bugzilla.suse.com/1186663
Get the latest Linux and open source security news straight to your inbox.