in_midi critical security fix in 5.24

[n0estoy]

I prefer to stick with v5.13 and was wondering, does uninstalling the in_midi input plugin take care of the vulnerability?

thanks

[DJ Egg]

Yes. Note there was an updated in_midi.dll made available after 5.24 was released, which fixed a couple of issues, so you can use that version if you ever need support for midi.

However, there will be no support for bug-ridden 5.13

I assume you're using it for the old shoutcast listings in the media library, maybe? (can't think of any other reason why you'd want to use it). In which case you could just keep gen_ml.dll from 5.13 and use 5.3 instead.

[Koopa]

Why you don't upgrade to 5.3?

does uninstalling the in_midi input plugin take care of the vulnerability?

I guess, but it does not fix all the other bugs in this old version. You don't get support for 5.13 too.

[Edit]Hehe, I'm slow, really slow.

[n0estoy]

thanks for the responses guys
DJ Egg: i found that thread earlier and tried using the file (unzipped it to the plugin directory after uninstalling the original dll) but it wasn't recognized.

I'm actually keeping the version around b/c its the last version my fav skin is compatible with 'simple' by peter clark. on that topic, if you know of any newer skins of similar design w/ cover art support, i welcome suggestions

thanks again

[DJ Egg]

You mean this skin?

It works fine with 5.3 here, though it does suffer with the green x / error (image not found) problem, as noted in the Known Glitches section of the Known Bugs thread, which also includes a link to the workaround fix :-)

Though ideally, you should contact Peter Clark and kindly ask him to fix the bug in his skin.

[JonnyMac]

I was just looking at his website after reading this thread. He is already aware of the issue...

From Peter Clark's webpage...

rpeterclark: Yeah, Simple has issues since 5.2x. An update will be released shortly that fixes the crashes, gets rid of the green boxes and adds color themes. I would say within a week.

[DJ Egg]

yay