From: Raspbian automatic forward porter Date: Thu, 5 Nov 2026 15:46:28 +0000 (+0000) Subject: Merge version 3.0.23-0+deb12u1+rpi1 and 3.0.24-0+deb12u1 to produce 3.0.24-0+deb12u1... X-Git-Tag: archive/raspbian/3.0.24-0+deb12u1+rpi1^0 X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=ed50ef09311d72e42fa26e26c55b261fa8ee03aa;p=vlc.git Merge version 3.0.23-0+deb12u1+rpi1 and 3.0.24-0+deb12u1 to produce 3.0.24-0+deb12u1+rpi1 --- ed50ef09311d72e42fa26e26c55b261fa8ee03aa diff --cc debian/changelog index ae984ddc,0d825e0e..54de0302 --- a/debian/changelog +++ b/debian/changelog @@@ -1,10 -1,21 +1,29 @@@ - vlc (3.0.23-0+deb12u1+rpi1) bookworm-staging; urgency=medium ++vlc (3.0.24-0+deb12u1+rpi1) bookworm-staging; urgency=medium + + [changes brought forward from 3.0.11.1-1+rpi1 by Peter Michael Green at Sun, 30 Aug 2020 00:37:35 +0000] + * Add extern to three functions for gcc-10 compatibility. + * Partially fix clean target. + - -- Raspbian forward porter Sat, 10 Jan 2026 15:21:13 +0000 ++ -- Raspbian forward porter Thu, 05 Nov 2026 15:46:27 +0000 ++ + vlc (3.0.24-0+deb12u1) bookworm-security; urgency=medium + + * Team upload. + * New upstream version 3.0.24. + - CVE-2026-56711: Fix an integer overflow in picture allocation. + - CVE-2026-73324: Fix memory disclosure to a SAT>IP server + during RTSP teardown. + - CVE-2026-102875: Fix a path traversal when extracting a + crafted skin archive. + * debian/upstream: Update upstream signing key. + * debian/: Add librist-dev for new rist plugin. + * debian/patches: build the RIST output plugin against librist 0.2.7. + * debian/: Disable plugins that are no longer supported upstream. + - a52 + - dca + - libmpeg2 + + -- Simon Quigley Thu, 29 Oct 2026 11:32:46 -0500 vlc (3.0.23-0+deb12u1) bookworm-security; urgency=medium