VLC 3.0.24 is its 'biggest security release ever' with 130+ fixes

VLC 3.0.24 has been released, billed as the video player's 'biggest security release ever' with over 130 fixes across the app and bundled libraries. VideoLAN president Jean-Baptiste Kempf says most flaws (OOB, integer overflow, double-free, use-after-free) are hard to exploit in practice, but urges users to update. There are few new user-facing features, though ATRAC3/ATRAC9 decoding, CEA-708 captions in MP4 and Samsung APV video support were added.

• Over 130 security fixes across VLC and bundled libraries
• Added ATRAC3/ATRAC9 decoding and CEA-708 captions in MP4
• Samsung APV video support via an updated FFmpeg
• Update validation now uses an RSA-4096 key