The release of multimedia player VLC 3.0.23 has been published. The code is written in C and is distributed under the LGPLv2.1 license. The release was formed two weeks after the VLC 3.0.22 release and primarily includes bug fixes and vulnerabilities identified in the aftermath.
In the new version:
- Crashes while processing certain JPEG files with JFIF headers have been fixed.
- Issues with line positioning when using WebVTT (Web Video Text Tracks) have been resolved.
- In builds for the Windows platform, the dark mode styling in the Qt-based interface has been improved, issues with OpenGL module compilation have been addressed, and image display using the D3D11 API has been successfully configured.
- Additional information about the audio codec has been provided (for supporting Flac 24bit).
- Prepared for compatibility with taglib 2.0, Qt6, FFmpeg8, mingw-w64 13, as well as new versions of libplacebo and pupnp.
- Vulnerabilities have been fixed: null pointer dereference in libass, undefined bit shift in theora, integer overflow in daala, infinite loop when parsing h264, buffer overflow in png handling code, and several overflows due to string formatting issues in various components.
Source: opennet.ru
