VLC 3.0.24 is out, billed as the video player’s ‘biggest security release ever’ with more than 130 fixes across the app and its bundled libraries. VideoLAN president Jean-Baptiste Kempf says the bulk of security flaws patched by the update are “hard to exploit in practice”, e.g., out-of-bounds reads and writes, integer overflow, use-after-free issues, etc. He adds not all are ‘harmless’ and encourages users to update. No major new user-facing features arrive in this update to the open-source media player, but improvements do. VLC 3.0.24 supports ATRAC3 and ATRAC9 decoding (the former used by Sony MiniDiscs the latter for PSP-era […]

You’re reading VLC makes its ‘biggest security release ever’, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.