Explore top 10 tips to secure your open-source projects now. Read More
×OpenMPT could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8206-1 April 23, 2026 libopenmpt vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: OpenMPT could be made to crash if it received specially crafted input. Software Description: - libopenmpt: module music library based on OpenMPT Details: Antonio Morales Maldonado discovered that OpenMPT did not properly limit the length of strings in certain cases, leading to a buffer overflow. An attacker could possibly use this issue to cause OpenMPT to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS libopenmpt-dev 0.3.6-1ubuntu0.1~esm2 Available with Ubuntu Pro libopenmpt-modplug1 0.3.6-1ubuntu0.1~esm2 Available with Ubuntu Pro libopenmpt0 0.3.6-1ubuntu0.1~esm2 Available with Ubuntu Pro openmpt123 0.3.6-1ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8206-1 CVE-2019-17113 . OpenMPT crash issue can lead to denial of service; updates available for Ubuntu 18.04 LTS to mitigate risks.. OpenMPT Update, Ubuntu 18.04, libopenmpt Security, Buffer Overflow Fix, Denial of Service. . Severity: Critical. LinuxSecurity.com Team
Update from 0.8.5 to 0.8.6 to fix regression: updates-0.8.6-0.7.19-0.6.28-0.5.42-0.4.54/ Potential security fix plus bug-fixes in 0.8.5: . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-e2621c29b2 2026-04-03 17:03:00.362998+00:00 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 42 Version : 0.8.6 Release : 1.fc42 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.8.5 to 0.8.6 to fix regression: updates-0.8.6-0.7.19-0.6.28-0.5.42-0.4.54/ Potential security fix plus bug-fixes in 0.8.5: updates-0.8.5-0.7.18-0.6.27-0.5.41-0.4.53/ -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 24 2026 Michael Schwendt - 0.8.6-1 - update to 0.8.6 which fixes regression in 0.8.5 * Sun Mar 22 2026 Michael Schwendt - 0.8.5-1 - update to 0.8.5 * Fri Jan 16 2026 Fedora Release Engineering - 0.8.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e2621c29b2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update from 0.8.5 to 0.8.6 to fix regression: updates-0.8.6-0.7.19-0.6.28-0.5.42-0.4.54/. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-f9d2152328 2026-03-27 01:16:52.247675+00:00 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 43 Version : 0.8.6 Release : 1.fc43 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.8.5 to 0.8.6 to fix regression: updates-0.8.6-0.7.19-0.6.28-0.5.42-0.4.54/ -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 24 2026 Michael Schwendt - 0.8.6-1 - update to 0.8.6 which fixes regression in 0.8.5 * Sun Mar 22 2026 Michael Schwendt - 0.8.5-1 - update to 0.8.5 * Fri Jan 16 2026 Fedora Release Engineering - 0.8.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-f9d2152328' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update from 0.8.5 to 0.8.6 to fix regression: updates-0.8.6-0.7.19-0.6.28-0.5.42-0.4.54/ Potential security fix plus bug-fixes in 0.8.5: . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-b58c5b3cc0 2026-03-27 00:14:48.799149+00:00 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 44 Version : 0.8.6 Release : 1.fc44 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.8.5 to 0.8.6 to fix regression: updates-0.8.6-0.7.19-0.6.28-0.5.42-0.4.54/ Potential security fix plus bug-fixes in 0.8.5: updates-0.8.5-0.7.18-0.6.27-0.5.41-0.4.53/ -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 24 2026 Michael Schwendt - 0.8.6-1 - update to 0.8.6 which fixes regression in 0.8.5 * Sun Mar 22 2026 Michael Schwendt - 0.8.5-1 - update to 0.8.5 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b58c5b3cc0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-ac4860090c 2024-06-26 01:54:41.557225 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 40 Version : 0.7.8 Release : 1.fc40 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.7.6 to 0.7.8 for more bug-fixes. update-0.7.8-releases-0.6.17-0.5.31-0.4.43/ 0.4.42/ -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 9 2024 Michael Schwendt - 0.7.8-1 - Update to 0.7.8. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ac4860090c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-018a95fb38 2024-06-26 01:26:22.509723 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 39 Version : 0.7.8 Release : 1.fc39 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.7.6 to 0.7.8 for more bug-fixes. update-0.7.8-releases-0.6.17-0.5.31-0.4.43/ 0.4.42/ -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 9 2024 Michael Schwendt - 0.7.8-1 - Update to 0.7.8. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-018a95fb38' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-7562c26666 2024-04-19 21:20:20.797022 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 40 Version : 0.7.6 Release : 1.fc40 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/ -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 29 2024 Michael Schwendt - 0.7.6-1 - update to 0.7.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2267561 - libopenmpt-0.7.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2267561 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-7562c26666' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label Allpackages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/ . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-85b6c6fa92 2024-04-14 03:07:59.493199 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 38 Version : 0.7.6 Release : 1.fc38 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and also as to resolve potential security issues: https://lib.openmpt.org/libopenmpt/news/ -------------------------------------------------------------------------------- ChangeLog: * Fri Mar 29 2024 Michael Schwendt - 0.7.6-1 - update to 0.7.6 * Thu Jan 25 2024 Fedora Release Engineering - 0.7.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 0.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2267561 - libopenmpt-0.7.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2267561 -------------------------------------------------------------------------------- This update can be installed withthe "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-85b6c6fa92' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.