[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 7 sources · 6 days · First seen · Last updated

VLC Media Player security and engine updates

Overview

The VideoLAN project released VLC Media Player version 3.0.24, a major update centered on addressing more than 130 security vulnerabilities. These flaws, which included buffer overflows, out-of-bounds reads/writes, integer overflows, and use-after-free errors, could have allowed attackers to compromise systems through malicious media files.

Jean-Baptiste Kempf, president of VideoLAN, noted that the scale of this update surpasses the previous record set in 2019. The increased efficiency in identifying these bugs is attributed in part to the growing use of Large Language Models (LLMs) for code analysis.

Technical enhancements accompanying the security fixes include upgrading FFmpeg from version 4.4 to 8.1.2, which enables the decoding of the Advanced Professional Video (APV) codec used by Samsung devices. The update also includes Sony’s proprietary ATRAC3 and ATRAC9 audio codecs, support for CEA-708 closed captions in MP4, and improved SFTP support with ED25519 hostkey support. Additionally, the release features enhanced RIST input/output capabilities, improved subtitle language detection, a new RSA-4096 encryption key to verify software update integrity, and official Flatpak support for Linux.

Entities

VideoLAN · FFmpeg · VLC Media Player · Samsung · Jean-Baptiste Kempf

Timeline

  1. [TECHNOLOGY] 3 sources
    VLC releases major 3.0.24 update with 130+ security fixes

    VLC has released version 3.0.24, featuring a record-breaking 130+ security fixes and new codec support for APV and Sony ATRAC formats.

  2. [TECHNOLOGY] 2 sources
    VLC Media Player releases version 3.0.24 with security updates

    VideoLAN has released VLC Media Player 3.0.24, featuring over 130 security fixes, FFmpeg upgrades, and expanded format support for various operating systems.

  3. [TECHNOLOGY] 2 sources
    VideoLAN releases VLC Media Player 3.0.24 with major security fixes

    VideoLAN released VLC Media Player 3.0.24, fixing over 130 security vulnerabilities and upgrading the FFmpeg engine to version 8.1.2 across Windows, macOS, and Linux platforms.

Sources

bhmag.fr · filehorse.com · iguru.gr · macitynet.it · omgubuntu.co.uk · sempreupdate.com.br · ubuntuhandbook.org

This summary has been updated 1 time: see revision history