vlc (3.0.24-0+deb12u1) bookworm-security; urgency=medium

vlc (3.0.24-0+deb12u1) bookworm-security; urgency=medium

  * Team upload.
  * New upstream version 3.0.24.
    - CVE-2026-56711: Fix an integer overflow in picture allocation.
    - CVE-2026-73324: Fix memory disclosure to a SAT>IP server
      during RTSP teardown.
    - CVE-2026-102875: Fix a path traversal when extracting a
      crafted skin archive.
  * debian/upstream: Update upstream signing key.
  * debian/: Add librist-dev for new rist plugin.
  * debian/patches: build the RIST output plugin against librist 0.2.7.
  * debian/: Disable plugins that are no longer supported upstream.
    - a52
    - dca
    - libmpeg2

[dgit import unpatched vlc 3.0.24-0+deb12u1]