This is the twenty-fifth release of the VLC 3.0 branch, named "Vetinari",
in reference to the Lord Patrician from Discworld.
3.0.24 brings a major upgrade from FFmpeg 4.4 to 8.1.2, expected to
improve decoding performance and fix playback issues across a range of
formats.
This update also includes:
- Update 49 third-party dependencies
- Add Atrac3/Atrac9 decoding support
- Add CEA-708 closed captions support in MP4
- Add SRT listener mode
- Add SFTP public key authentication options and ED25519 hostkey support
- Improve Qt6 support
- Improve subtitle language detection and WebVTT handling
- Improve Qt dialogs and effects window geometry saving
- Switch RIST input and output to librist, with main and simple profiles
- Fix numerous crashes, leaks, hangs and malformed file handling issues
in MKV, MP4, MPEG-TS, Ogg, AVI and other demuxers - Fix a LibVLC media list player race
- Add Super Resolution scaling with Moore Threads GPUs
- Add NV12 DirectShow capture support on Windows
- Fix Direct3D11 adjust filter issues and texture leaks
- Fix Windows audio crashes, leaks and deadlocks
- Fix slow Windows startup when Daylight Saving Time changes
- Fix the AudioToolbox MIDI synthesizer crash on macOS 26 and later
- Add Flatpak build support
This release also disables the RealRTSP plugin in all build configurations,
removes the NPAPI browser plugin and the broken YouTube Lua script.
The updater now uses a new RSA-4096 key to verify updates.
3.0.24 also contains over 130 security fixes in VLC and its bundled
libraries, including fixes for out-of-bounds accesses, integer overflows,
double frees and use-after-free bugs.
See https://www.videolan.org/security/ for more details. The security
advisories will be updated a few days after the release.
Many thanks to the security researchers, the OSS-Fuzz project and all
contributors who helped find, report and fix these issues.
