-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Oct 2026 11:32:46 -0500
Source: vlc
Architecture: source
Version: 3.0.24-0+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Simon Quigley <tsimonq2@debian.org>
Changes:
vlc (3.0.24-0+deb12u1) bookworm-security; urgency=medium
.
* Team upload.
* New upstream version 3.0.24.
- CVE-2026-56711: Fix an integer overflow in picture allocation.
- CVE-2026-73324: Fix memory disclosure to a SAT>IP server
during RTSP teardown.
- CVE-2026-102875: Fix a path traversal when extracting a
crafted skin archive.
* debian/upstream: Update upstream signing key.
* debian/: Add librist-dev for new rist plugin.
* debian/patches: build the RIST output plugin against librist 0.2.7.
* debian/: Disable plugins that are no longer supported upstream.
- a52
- dca
- libmpeg2
Checksums-Sha1:
d9bae7277fc19f47ffdfa38a293b026850d6d4fb 6313 vlc_3.0.24-0+deb12u1.dsc
dae683b3939220eac4a5edfc816c44e00659e68f 27620304 vlc_3.0.24.orig.tar.xz
ea89c5032311deb384b00a838a36e54ef2097fab 866 vlc_3.0.24.orig.tar.xz.asc
d9a428efc44fdf48dce8ca83c356fe75818b3615 66532 vlc_3.0.24-0+deb12u1.debian.tar.xz
948bd4f2046c6ba4c9f2aa169c3fffe83fe3cc67 8333 vlc_3.0.24-0+deb12u1_source.buildinfo
Checksums-Sha256:
80300244f5f3543980130fbb48a4c3df302c9e6552aa042a0edc7d566849ec90 6313 vlc_3.0.24-0+deb12u1.dsc
e7cab503d1d7d5849b89d2cf0e1ee60d0ef6d012407791b644b9cfc0cc225fdf 27620304 vlc_3.0.24.orig.tar.xz
c3ff247653cf031cabe5e0c8551703adf468a15c3e078ca458ab1393ea20bf01 866 vlc_3.0.24.orig.tar.xz.asc
189ba4ccf75dd7de8cb08ce84c7feebf5768004cb603cb615f4a1ad6fac1447f 66532 vlc_3.0.24-0+deb12u1.debian.tar.xz
a9b59fefeb615905222b31efe2ca0aa5aaad0457a82dd768ad85f482f421ccf7 8333 vlc_3.0.24-0+deb12u1_source.buildinfo
Files:
729fb18e488b1a8cb3f540463a3a7775 6313 video optional vlc_3.0.24-0+deb12u1.dsc
c10ef9a34204bc0b5cadc8b9a19dea7c 27620304 video optional vlc_3.0.24.orig.tar.xz
0e27069530a06b0a538c9b24106274c3 866 video optional vlc_3.0.24.orig.tar.xz.asc
80dd9564d28e97aec715264dfacfb4f3 66532 video optional vlc_3.0.24-0+deb12u1.debian.tar.xz
11149d8b1c349cb2761c1b4a8155ab48 8333 video optional vlc_3.0.24-0+deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmrjlmkACgkQ4n8s+EWM
L6RiwA//bK4asRaBHPvG5BVkie3nwQOK7afH2FbXv8k25ctdBNljS6NCiZ+ESOMb
/ClbYx3qH5PI0puX5e5+FXY+AhfHJvkrwwt4qD2ofojhxLvkZ0fWsNce4JrZX8md
rEmAPoCqa34iSkogS1y3+Qikzkk+dSYJRiiFTzQNTyRM4jzf1yOI/wuJy58oD6CF
+7FzRNUokOPFBe/tJGcJwKXtp6qYN025x81Ix94iIEBaNvEI0O2yygyheg8QDXaa
Yr/3EDQ3fgDFjOVx/gxI5PBsvFrEcI+I9TFVrVTPTYCL7+e0C3xOOi7h+y6D9hMb
Pra+SRk0y8L0OBOafTgteZ4gvwsd5JSbCRQCpiX0wvw5PVc/mcRq3RxlGZZf2tmQ
9nmqDDmYTUJVmn3uyUSrzddC/8s4sBEXTRCl8NeCKcq4msskjrrDhvCsKQ1k5uqO
Am45vOiUxdiqEruY3S64iKSN97mmPbeUBPuzGIvExC6o+B0G5bLo4D1WgDdbqAFK
SM5Q9yJRG9teoe7ef45uShsjFxA1dh9NW4KwZQc16lFbV6/5TSWF4uYttNuu76QW
awJv0AHjUeINRAj83ydgdu6JY6sxThN8ldgZcVcdYX20b5fMziBA5OPH/0YRnE3y
gzy65XWseo4Kzp3ZpMsbFw2k4mIfLxiFIQGKkGQVpadx6kreYvw=
=5n6c
-----END PGP SIGNATURE-----
