The following Fedora EPEL 8 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-c82583d07e
pngcheck-2.4.0-5.el8
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fe42686452
mbedtls-2.16.9-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
libopenmpt-0.5.4-1.el8
libtelnet-0.23-1.el8
Details about builds:
================================================================================
libopenmpt-0.5.4-1.el8 (FEDORA-EPEL-2020-7ff8a53874)
C/C++ library to decode tracker music module (MOD) files
--------------------------------------------------------------------------------
Update Information:
libopenmpt 0.5.4 (2020-11-29) ============================= * AMS: An upper
bound for uncompressed sample size is now established to avoid memory exhaustion
from malformed files. * DMF: Support early format beta versions (in particular
versions 1-4). * MED: Also use octave wrapping in 8-channel mode for MMD0/MMD1
modules. * MED: If 8-channel mode is activated, ignore BPM mode. * MED:
Emulate tempo commands F01 and F02 quirk. * MED: Tempo commands below 32 BPM
were interpreted as tempo slides. * IMF: Instrument sample mapping was off by
one octave, notable in the guitar part of Astaris by Karsten Koch. libopenmpt
0.5.3 (2020-10-25) ============================= * [Sec] Possible hang if a
MED file claimed to contain 256 songs. (r13704) * [Bug] libopenmpt:
`openmpt::is_extension_supported2()` exported symbol was missing (C++). *
[Bug] `openmpt::module::set_position_seconds` sometimes behaved as if the song
end was reached when seeking into a pattern loop and in some other corner cases.
* Increase threshold for ignoring panning commands from 820 to 830. * Subsong
names now fall back to the first pattern���s name if empty. * MO3: Avoid certain
ModPlug hacks from being fixed up twice, which could lead to e.g. very narrow
pan swing range for old OpenMPT IT files saved with a recent MO3 encoder
version. * MO3: Some files with corrupted envelope data could be rejected
completely (normally libopenmpt should fix up the envelope data). * MO3: Song
metadata didn���t correctly identify MPTM as source format (it appeared as IT
instead). * STM: Change tempo computation to behave like Scream Tracker 2.3
instead of Scream Tracker 2.2, as the playback frequencies we use for sample
playback are closer to those of Scream Tracker 2.3. * PLM: Percentage offset
(Mxx) was slightly off. * WOW: Fix loading of several files and harden WOW
detection. libopenmpt 0.5.2 (2020-08-30) ============================= *
[Change] `Makefile` `CONFIG=emscripten` now supports `EMSCRIPTEN_TARGET=all`
which provides WebAssembly as well as fallback to JavaScript in a single build.
* [Regression] `Makefile` `CONFIG=emscripten` does not support
`EMSCRIPTEN_TARGET=asmjs` or `EMSCRIPTEN_TARGET=asmjs128m` any more because
support has been removed from current Emscripten versions. * [Regression]
Support for Emscripten versions older than 1.39.7 has been removed. * PP20:
The first few bytes of some files were not decompressed properly, making some
files unplayable (depending on the original format). libopenmpt 0.5.1
(2020-07-26) ============================= * [Bug] `libopenmpt/libopenmpt.h`
failed to compile with `LIBOPENMPT_NO_DEPRECATE` defined. * MPTM: Qxy now
retriggers OPL notes if new compatibility flag is set in file. * MPTM: Bring
back old OPL note end-of-envelope behaviour for files made with OpenMPT 1.28.
* IT: Global volume slides with both nibbles set preferred the ���slide up��� nibble
over the ���slide down��� nibble in old OpenMPT versions, unlike other slides. Such
old files are now imported correctly again. * IT: Fixed an edge case where, if
the filter hit full cutoff / no resonance on the first tick of a row where a new
delayed note would be triggered, the filter would be disabled even though it
should stay active. Fixes trace.it by maddie. * OXM: Some sample loops were
not imported correctly. * XM: Out-of-range arpeggio clamping behaviour broke
in OpenMPT 1.23.05.00. The arpeggios in Binary World by Dakota now play
correctly again. * S3M: Support old-style sample pre-amp value in very early
S3M files. * S3M: Only force-enable fast slides for files ST 3.00. Previously,
any S3M file made with an ST3 version older than 3.20 enabled them. * S3M:
Only apply volume and middle-C speed on instrument change if the new sample slot
has sample data. * MOD: Fix an infinite loop in GamerMan by MrGamer by playing
non-ProTracker MODs more like FT2 would. * M15: Improve tracker detection
heuristics to never assume SoundTracker 2.0 if there is a huge number of Dxx
commands, as that is a definite hint that they should be treated as volume
slides. Fixes Monty On The Run by Master Blaster. * MO3: Support OPL patches
in MO3 files created from MPTM and S3M. * DBM: If a global pattern command
would be lost because both effect commands in a cell would have to go into the
regular effect column (e.g. a speed and a tempo command), the lost command is
now attempted to be written into a different cell on the same row. Fixes ���Party-
Question V��� by grogon. libopenmpt 0.5.0 (2020-05-24)
============================= * [New] OggMod compressed FastTracker 2 XM
(OXM) modules are now supported. * [New] The emulated Amiga type when Amiga
resampler emulation is enabled can now be selected via ctl
`render.resampler.emulate_amiga_type`. Possible values are: `"auto"`,
`"a500"`,
`"a1200"`, and an experimental option `"unfiltered"`. * [New]
libopenmpt: New
API `openmpt::module::get_current_estimated_bpm()` (C++), and
`openmpt_module_get_current_estimated_bpm()` (C) which provides accurate beats
per minute information for module formats with time signature and an educated
guess based on speed and tempo for others. * [New] libopenmpt: New type-aware
ctl APIs that do not require memory allocations and are thus realtime-safe:
`openmpt::module::ctl_get_boolean()`, `openmpt::module::ctl_get_integer()`,
`openmpt::module::ctl_get_floatingpoint()`, `openmpt::module::ctl_get_text()`,
`openmpt::module::ctl_set_boolean()`, `openmpt::module::ctl_set_integer()`,
`openmpt::module::ctl_set_floatingpoint()` (C++), and
`openmpt_module_ctl_get_boolean()`, `openmpt_module_ctl_get_integer()`,
`openmpt_module_ctl_get_floatingpoint()`, `openmpt_module_ctl_get_text()`,
`openmpt_module_ctl_set_boolean()`, `openmpt_module_ctl_set_integer()`,
`openmpt_module_ctl_set_floatingpoint()` (C). * [New] libopenmpt C++ New API
`openmpt::is_extension_supported2()` which takes a `std::string_view` parameter
instead of `std::string`. * [New] libopenmpt C++: New API
`openmpt::module::module(std::vector<std::byte> data)`,
`openmpt::module::module(const std::byte * data, std::size_t size)`,
`openmpt::module::module(const std::byte * beg, const std::byte * end)`. *
[New] libopenmpt C++: New API `openmpt::probe_file_header(flags, const std::byte
* data, std::size_t size, filesize)`, `openmpt::probe_file_header(flags, const
std::byte * data, std::size_t size)`. * [New] libopenmpt_ext C++: New API
`openmpt::module_ext::module_ext(std::vector<std::byte> data)`,
`openmpt::module_ext::module_ext(const std::byte * data, std::size_t size)`,
`openmpt::module_ext::module_ext(std::vector<std::uint8_t> data)`,
`openmpt::module_ext::module_ext(const std::uint8_t * data, std::size_t size)`.
* [Change] `std::istream` based file I/O has been speed up. * [Change]
Dependency on iconv on Linux has been removed. * [Regression] libmodplug: The
libmodplug emulation layer has been removed from the libopenmpt tree. Please use
the separate libopenmpt-modplug package instead. * [Regression] foo_openmpt:
foo_openmpt is discontinued. Please use Kode54���s fork foo_openmpt54:
https://www.foobar2000.org/components/view/foo_openmpt54. * [Regression]
Support for building with C++11 or C++14 has been removed. C++17 is now required
to build libopenmpt. * [Regression] Support for client code using C++11 or C++
14 has been removed. C++17 is now required to build libopenmpt client
applications. * [Regression] Support for Visual Studio 2015 has been removed.
* [Regression] Support for GCC 4.8, 4.9, 5, 6 has been removed. * [Regression]
Support for Clang 3.6, 3.7, 3.8, 3.9, 4 has been removed. * [Regression]
Support for Emscripten versions older than 1.39.1 has been removed. *
[Regression] Building with Android NDK older than NDK r18b is not supported any
more. * [Regression] openmpt123: Support for SDL1 (but not SDL2) output has
been removed. * [Regression] openmpt123: Support for SDL2 older than 2.0.4 has
been removed. * [Regression] Windows XP and Windows Vista are no longer
supported. * [Regression] It is no longer possible to optionally use iconv for
character set conversions. * [Bug] openmpt123: openmpt123 now honors the
current locale and outputs text appropriately. * [Bug] openmpt123: Piping text
output to other than console window targets on Windows has been fixed. *
Greatly improved MED import. Synthesized instruments are still not supported but
support was added for: Multisampled instruments, delta samples, more pattern
commands, Hold and Decay, VSTi and MIDI output, multiple songs and many other
small changes. * Improved OPL channel allocation when more than 18 notes are
active, so that channels that have completely faded out are prioritized over
channels that have already been released but have not faded out yet. *
Interactively triggering an OPL instrument could cause the first pattern channel
to no longer be played back correctly. * Fix some inaccuracies in OPL
emulator. * Fix overflow of OPL amplification happening at a synth volume
level of 510. * End-of-sample pop reduction of surround channels was applied
to front channels instead, causing a pop on the front channels instead of
removing it on the back channels. * IT: Disable retrigger with short notes
quirk for modules saved with Chibi Tracker, as it does not implement that quirk.
* IT: Instrument and sample panning should not override channel panning for
following notes. * IT: SBx is now prioritized over Bxx commands that are to
the left of it. * IT: Duplicate Check Type ���Sample��� should only be applied if
the instruments match, too. * IT: Duplicate Check Type ���Note��� should compare
pattern notes, but it was comparing the new pattern note against the old
translated note. * IT: Various fixes for envelope resetting. * IT / S3M:
When combining SBx and EEx effects, don���t skip the first row of the loop like in
FastTracker 2. * S3M: Empty pattern commands now affect effect memory as well.
* S3M: Offset beyond loop end wraps around to loop start like in Scream Tracker
3 + GUS (previously it just keep playing from the loop start, which is neither
what GUS nor Sound Blaster drivers do). * S3M: Notes cannot be retriggered
after they have been cut. * S3M: Fix portamento after note cut (fixes
antediluvian_song.s3m). * S3M / MOD: Previous note offset is no longer used
for retriggered notes if there was no instrument number next to the Qxy effect.
* MOD: Sample swapping now also works if the sample that is being swapped from
does not loop. Swapping to a non-looped sample now stops playback once the
swapped-from sample reaches its (loop) end. * MOD: Fix early song ending due
to ProTracker pattern jump quirk (EEx + Dxx on same row) if infinite looping is
disabled. Fixes Haunted Tracks.mod by Triace. * MOD: Previous note offset is
no longer used for retriggered notes if there was no instrument number next to
the E9x effect. * MOD: Vibrato type ���ramp down��� was upside down. * XM: If a
file contains patterns longer than 1024 rows, they are now clamped to 1024 rows
instead of 64 rows. * XM: Do not reset note-off status on portamento if there
is no instrument number. libopenmpt 0.4.12 (2020-04-13)
============================== * IT: Vibrato was too fast in Old Effects mode
since libopenmpt 0.3. * XM: Treat 8bitbubsy���s FT2 clone exactly like
Fasttracker 2 with respect to compatibility and playback flags. For example, FT2
Pan Law was not applied. * DMF: Some files had a wrong tempo since libopenmpt
0.2.5705-beta15.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 22 2020 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.5.4-1
- update to 0.5.4
* Thu Oct 29 2020 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.5.3-1
- upgrade to 0.5.3 (security release for the 0.5 series)
* Thu Oct 29 2020 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.4.15-1
- update to 0.4.15
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.11-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libtelnet-0.23-1.el8 (FEDORA-EPEL-2020-11e33696e0)
TELNET protocol parsing framework
--------------------------------------------------------------------------------
Update Information:
Small library for parsing the TELNET protocol, responding to TELNET commands via
an event interface, and generating valid TELNET commands. libtelnet includes
support for the non-official MCCP, MCCP2, ZMP, and MSSP protocols used by MUD
servers and clients.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1896375 - Please build libtelnet for EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1896375
--------------------------------------------------------------------------------