Changelog for
libmodplug1-32bit-0.8.9.0+git20170610.f6dd59a-3.1.x86_64.rpm :
* Fri Jun 11 2021 Bjørn Lie
- Correct Summary and Group info for libmodplug1, it\'s a shared library, not a devel file/package.
* Mon Jun 08 2020 Dave Plater - Reinstated libmodplug package from Leap:42.3:Update to replace obsolete libopenmpt generated binary.
* Mon Mar 19 2018 tchvatalAATTsuse.com- Update to version 0.8.9.0+git20170610.f6dd59a bsc#1022032:
* PSM: add missing line to commit
* ABC: prevent possible increment of p past end
* ABC: ensure read pointer is valid before incrementing
* ABC: terminate early when things don\'t work in substitute
* OKT: add one more bound check
* FAR: out by one on check
* ABC: 10 digit ints require null termination
* PSM: make sure reads occur of only valid ins
* ABC: cleanup tracks correctly.
* WAV: check that there is space for both headers
* OKT: ensure file size is enough to contain data
* ABC: initialize earlier
* ABC: ensure array access is bounded correctly.
* ABC: clean up loop exiting code
* ABC: avoid possibility of incrementing
*p
* ABC: abort early if macro would be blank
* ABC: Use blankline more often
* ABC: Ensure for loop does not increment past end of loop
* Initialize nPatterns to 0 earlier
* Check memory position isn\'t over the memory length
* ABC: transpose only needs to look at notes (<26)
* Mon Mar 19 2018 tchvatalAATTsuse.com- Update to version 0.8.9.0+git20171024.e9fc46e:
* Spelling fixes
* Bump version number to 0.8.9.0
* MMCMP: Check that end pointer is within the file size
* WAV: ensure integer doesn\'t overflow
* XM: additional mempos check
* sndmix: Don\'t process row if its empty.
* snd_fx: dont include patterns of zero size in length calc
* MT2,AMF: prevent OOB reads
* Thu Mar 27 2014 tchvatalAATTsuse.com- Add patch for broken pc file where quite some upstream refer to modplug directly without specifying the subdir it is in.
* libmodplug-0.8.8.5-fix-missing-include-path.patch
* Thu Mar 13 2014 reddwarfAATTopensuse.org- Update to version 0.8.8.5
* Some security patches: CVE-2013-4233, CVE-2013-4234, as well as many fixes suggested by static analyzers: clang build-scan, and coverity.- Remove CVE-2013-4233.patch, CVE-2013-4234.patch and libmodplug-overflow.patch- Stop using dos2unix- Run through spec-cleaner- Use full URL in Source tag
* Tue Oct 22 2013 sbrabecAATTsuse.cz- Two security fixes (bnc#834483):
* Fix integer overflow (CVE-2013-4233, CVE-2013-4233.patch).
* Fix heap overflows (CVE-2013-4234, CVE-2013-4234.patch).
* Thu Mar 15 2012 ajAATTsuse.de- Fix buffer overflow.
* Fri Aug 12 2011 dimstarAATTopensuse.org- Stop using source services.
* Mon Aug 08 2011 sbrabecAATTsuse.cz- Update to version 0.8.8.4 (bnc#710726):
* Improve timidity.cfg parsing capability
* Add source command capability in timidity.cfg (useful for debian default)
* Fix integer overflow in WAV reader (SA45131/A)
* Fix S3M stack overflow possibility (SA45131/B)
* Bound seeking and reading in PAT files
* Fix AMS/AMSv2 and DSM too large by one (SA45131/C)
* Use bmpvalues in Octamed files when calcuting default tempo
* Wed May 25 2011 sbrabecAATTsuse.cz- Updated to version 0.8.8.3:
* Several security fixes (including CVE-2011-1761, bnc#691137).
* Improve compatibility with MSVC 2010
* Improve PTM playback (Fix byteswapping)
* Improve S3M support (ignore corrupted data, bnc#686624)
* Improve AMF support (bounds checking)
* Sun May 22 2011 davejplaterAATTgmail.com- Fixed ChangeLog eol encoding with dos2unix.
* Mon Apr 18 2011 roAATTsuse.de- fix baselibs.conf file
* Sun Apr 03 2011 reddwarfAATTopensuse.org- Updated to version 0.8.8.2
* Improve compatibility with MSVC 2010
* Improve PTM playback (Fix byteswapping)
* Improve S3M support (ignore corrupted data)
* Improve AMF support (bounds checking)- Added pkg-config BuildRequire- Make build verbose- Remove execution permission from shared library
* Sat Jul 17 2010 reddwarfAATTopensuse.org- Updated to version 0.8.8.1
* Tue Feb 16 2010 meissnerAATTsuse.de- added a baselibs.conf (for libxine1 baselibs)
* Wed May 06 2009 sbrabecAATTsuse.cz- Changes reviewed and signed-off.
* Wed Apr 29 2009 cmorve69AATTyahoo.es- Updated to version 0.8.7.
* small fixes contributed since last release
* buffer overflow fix (already fixed in openSUSE)
* Tue Apr 21 2009 sbrabecAATTsuse.cz- Package added to openSUSE Factory - gstreamer-0_10-plugins-bad now depend on external libmodplug. Source: OBS home:RedDwarf.- Rename and split according to shared library policy.- Updated to version 0.8.6:
* small fixes contributed since last release
* fixed libmodplug s3m boundary check overflow vulnerability in Amiga MED and OctaMED files (bnc#496541, securityfocus#30801)- Fixed invalid delete (bnc#443444).- Fixed timidity.cfg path.
* Mon Mar 23 2009 cmorve69AATTyahoo.es- First OBS version, from Packman
* Fri Nov 03 2006 Manfred.TremmelAATTiiv.de- Update to 0.8.4
* Fri Oct 15 2004 Manfred.TremmelAATTiiv.de- some little changes for amd64
* Fri Feb 13 2004 Manfred.TremmelAATTiiv.de- Initial version