- vlc (3.0.23-0+deb12u1+rpi1) bookworm-staging; urgency=medium
++vlc (3.0.24-0+deb12u1+rpi1) bookworm-staging; urgency=medium
+
+ [changes brought forward from 3.0.11.1-1+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sun, 30 Aug 2020 00:37:35 +0000]
+ * Add extern to three functions for gcc-10 compatibility.
+ * Partially fix clean target.
+
- -- Raspbian forward porter <root@raspbian.org> Sat, 10 Jan 2026 15:21:13 +0000
++ -- Raspbian forward porter <root@raspbian.org> Thu, 05 Nov 2026 15:46:27 +0000
++
+ vlc (3.0.24-0+deb12u1) bookworm-security; urgency=medium
+
+ * Team upload.
+ * New upstream version 3.0.24.
+ - CVE-2026-56711: Fix an integer overflow in picture allocation.
+ - CVE-2026-73324: Fix memory disclosure to a SAT>IP server
+ during RTSP teardown.
+ - CVE-2026-102875: Fix a path traversal when extracting a
+ crafted skin archive.
+ * debian/upstream: Update upstream signing key.
+ * debian/: Add librist-dev for new rist plugin.
+ * debian/patches: build the RIST output plugin against librist 0.2.7.
+ * debian/: Disable plugins that are no longer supported upstream.
+ - a52
+ - dca
+ - libmpeg2
+
+ -- Simon Quigley <tsimonq2@debian.org> Thu, 29 Oct 2026 11:32:46 -0500
vlc (3.0.23-0+deb12u1) bookworm-security; urgency=medium