libopenmpt (0.3.6-1ubuntu0.1~esm2) bionic-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2019-17113.patch: [Fix] libmodplug: C API:
      Limit the length of strings copied to the output buffer of
      ModPlug_InstrumentName() and ModPlug_SampleName() to 32 bytes
    - CVE-2019-17113

 -- John Breton <john.breton@canonical.com>  Thu, 23 Apr 2026 10:12:53 -0400

libopenmpt (0.3.6-1ubuntu0.1~esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: DoS (out-of-bounds read) via an IT or MO3 file with any
    nested pattern loops.
    - debian/patches/CVE-2018-10017.patch: Possible out-of-bounds read when
      computing length of some IT files with pattern loops.
    - CVE-2018-10017
  * SECURITY UPDATE: DoS (application crash) or possibly other unspecified
    impact via a crafted AMS file because of an invalid write near address 0
    in an out-of-memory situation.
    - debian/patches/CVE-2018-11710.patch: Do not initialize CPattern objects
      with inconsistent m_ModCommands (empty) and m_Rows (64) values.
    - CVE-2018-11710

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Mon, 17 Jun 2019 13:26:39 -0300

libopenmpt (0.3.6-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2018-6611 (Closes: #889545).

  * debian/copyright:
    - Update dates.
  * debian/compat:
    - Use debhelper 11.
  * debian/control:
    - Set Maintainer to debian-multimedia@lists.d.o.
    - Switch Vcs URLs to salsa.debian.org.
    - Bump standards version to 4.1.3.
  * debian/rules:
    - Revert workaround implementing build targets manually now that debhelper
      has been fixed.

 -- James Cowgill <jcowgill@debian.org>  Sun, 04 Feb 2018 23:09:22 +0000

libopenmpt (0.3.4-1) unstable; urgency=medium

  * New upstream release.

  * debian/control:
    - Bump standards to 4.1.2.

 -- James Cowgill <jcowgill@debian.org>  Mon, 18 Dec 2017 14:55:44 +0000

libopenmpt (0.3.3-1) unstable; urgency=medium

  * New upstream release.

 -- James Cowgill <jcowgill@debian.org>  Tue, 21 Nov 2017 08:54:21 +0000

libopenmpt (0.3.2-1) unstable; urgency=medium

  * New upstream release.

  * debian/control:
    - Set Rules-Requires-Root: no.
  * debian/rules:
    - Remove unused variables.
    - Implement build targets manually to workaround dh not playing well
      with a "build" directory in the upstream source.

 -- James Cowgill <jcowgill@debian.org>  Wed, 08 Nov 2017 23:31:31 +0000

libopenmpt (0.3.1-1) unstable; urgency=medium

  * New upstream release.

  * debian/control:
    - Remove unnecessary testsuite autopkgtest header.
    - Bump standards to 4.1.1 (no changes).
  * debian/copyright:
    - Update copyright including some modifications from decopy.
  * debian/libopenmpt-dev.install:
    - Install libopenmpt_ext.* headers which are now stable.
  * debian/libopenmpt0.symbols:
    - Add new symbols foudn in 0.3.0.
  * debian/patches:
    - Refresh patches.
  * debian/rules:
    - Build doxygen documentation again and update install path.
  * debian/tests:
    - Use openmpt_module_create2 in autopkgtests.
  * debian/watch:
    - Update for new versioning scheme.

 -- James Cowgill <jcowgill@debian.org>  Mon, 02 Oct 2017 23:47:01 +0100

libopenmpt (0.2.8760~beta27-1) unstable; urgency=medium

  * New upstream release.

 -- James Cowgill <jcowgill@debian.org>  Wed, 16 Aug 2017 11:31:38 +0100

libopenmpt (0.2.8461~beta26-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2017-11311: arbitrary code execution via a crafted PSM File.
      (Closes: #867579)

 -- James Cowgill <jcowgill@debian.org>  Fri, 14 Jul 2017 17:21:59 +0100

libopenmpt (0.2.8414~beta25-1) unstable; urgency=medium

  * New upstream release.

 -- James Cowgill <jcowgill@debian.org>  Wed, 05 Jul 2017 18:36:10 +0100

libopenmpt (0.2.8190~beta24-1) unstable; urgency=medium

  * New upstream release.
    - Fixes various local denial-of-service security bugs. (Closes: #864195)
  * Upload to unstable.

  * debian/control:
    - Bump standards to 4.0.0 (no changes required).

 -- James Cowgill <jcowgill@debian.org>  Mon, 19 Jun 2017 18:53:10 +0100

libopenmpt (0.2.8043~beta23-1) experimental; urgency=medium

  * New upstream release.

 -- James Cowgill <jcowgill@debian.org>  Mon, 01 May 2017 20:16:49 +0100

libopenmpt (0.2.7774~beta22-1) experimental; urgency=medium

  * New upstream release.
  * Disable dynamic library loading following upstream's default change.
  * Use upstream's version of libmodplug.pc now that it's fixed.

 -- James Cowgill <jcowgill@debian.org>  Sun, 19 Mar 2017 21:49:53 +0000

libopenmpt (0.2.7561~beta20.5-1) experimental; urgency=medium

  * New upstream release.

  * debian/copyright:
    - Update dates.
  * debian/patches, debian/libopenmpt-modplug1.symbols:
    - Track modplug symbols in a debian symbols file instead of the ELF symbol
      versioning file.
    - Add new modplug symbols from 0.2.7561~beta20.5.

 -- James Cowgill <jcowgill@debian.org>  Fri, 10 Feb 2017 11:44:43 +0000

libopenmpt (0.2.7386~beta20.3-3) unstable; urgency=medium

  * debian/tests:
    - Depend on build-essential in all autopkgtests. This should fix the
      recent autopkgtest failures.

 -- James Cowgill <jcowgill@debian.org>  Thu, 12 Jan 2017 17:17:13 +0000

libopenmpt (0.2.7386~beta20.3-2) unstable; urgency=medium

  * Enable libmodplug compatibility layer.
    - Add libopenmpt-modplug-dev and libopenmpt-modplug1.
    - Add autopkgtest for libmodplug compat layer.
    - Add ELF symbol versioning to all the symbols exported by the
      compatibility layer.

  * debian/control:
    - Build-Conflicts against autoconf-archive.
    - Drop "decoding" from the short description to make more room.
  * debian/rules:
    - Disable static library in configure invocation.

 -- James Cowgill <jcowgill@debian.org>  Sun, 08 Jan 2017 10:38:40 +0000

libopenmpt (0.2.7386~beta20.3-1) unstable; urgency=medium

  * New upstream release.

 -- James Cowgill <jcowgill@debian.org>  Fri, 25 Nov 2016 09:42:47 +0000

libopenmpt (0.2.7299~beta20.2-2) unstable; urgency=medium

  * debian/control:
    - Add extra dependencies to libopenmpt-dev to satisfy pkg-config. Should
      fix autopkgtest failures.
  * debian/libopenmpt-dev.install:
    - Drop static library.
  * debian/watch:
    - Remove hyphen before @ANY_VERSION@ in watch file.

 -- James Cowgill <jcowgill@debian.org>  Sat, 12 Nov 2016 15:31:14 +0000

libopenmpt (0.2.7299~beta20.2-1) unstable; urgency=medium

  * New upstream release.

  * debian/patches:
    - Drop 01_openmpt123-whatis.patch - applied upstream.
  * debian/rules:
    - Use dh_autoreconf --as-needed.
    - Install libopenmpt/dox/changelog.md as the upstream changelog.
  * debian/tests:
    - Add pkg-config to autopkgtest dependencies.

 -- James Cowgill <jcowgill@debian.org>  Wed, 09 Nov 2016 15:55:27 +0000

libopenmpt (0.2.7025~beta20.1-1) unstable; urgency=medium

  * Initial release. (Closes: #839185)

 -- James Cowgill <jcowgill@debian.org>  Mon, 03 Oct 2016 10:04:29 +0100
