Sunday, January 11, 2026

UPDATE: VLC 3.0.23

Here is an update to VLC 3.0.23.


Changes between 3.0.22 and 3.0.23:
----------------------------------

Codecs:
* Fix WebVTT line positioning
* Expose additional audio codec information (notably for Flac 24bit)

Demuxers:
* fix some JPEG files wih JFIF headers

Security:
* Fix null deref in libass, undefined shift in theora and cc-708, integer overflow in daala,
Infinite loop in h264 parsing, buffer overflow in png and multiple format-overflows

Misc:
* Prepare compatibility for taglib 2.0, Qt6, FFmpeg8, mingw-w64 v13 and newer versions of
libplacebo and pupnp


Changes between 3.0.21 and 3.0.22:
----------------------------------

Core:
* Assume subpictures are in SDR by default

Decoders:
* Fix Opus channel mapping
* Fix hardware decoding with VideoToolbox of XVID MPEG-4 video
* Add dav1d-all-layers option
* Fix DVD CEA-608 captions parsing
* Fix ProRes 4:4:4:4
* Disable decoding using libdca, libmpeg2 and liba52 by default in favor of libavcodec

Demuxers:
* Add support for DMX audio music (MUS) files
* Handle mkv-use-chapter-codec option
* Add A_ATRAC/AT1 support in matroska
* Prevent FLAC seeking logic get stuck
* Handle pictures in FLAC
* Fix VOB/AOB LPCM/MLP detection failing occasionally
* Cut QNap title on first invalid character
* Fix display of certain JPEG files
* Fix playback of very short ASF files (duration less than 1s)
* Multiple fixes in MPEG-TS
* Fix crashes in multiple demuxers (reported by rub.de, oss-fuzz and others)

Input:
* Fix SFTP seeking for large files on 32-bit OS

Interface:
* Qt: Add option to use dark palette
* Qt: Add compilation support for newer versions of Qt5
* Qt: Fix scrolling on volume slider
* macOS: fix crashes when drag'n drop items in the playlist
* KDE: fix MPRIS state when started from file

Service Discovery:
* UPnP: remove SAT>IP channel list fallback

Video Output:
* Use a better stretch mode in wingdi
* Fetch missing device information when running in UWP

Video Filter:
* Add AMD GPU Frame Rate Doubler (Direct3D11)
* Improve visualization of low frequencies in spectrogram

Misc:
* gnutls: remove manual DH prime bits setting
* Avoid very large fonts in portrait mode
* Update of most translations

Security:
* Heap Buffer Overflow READ in TY, NSV, CVDsub, SPU, Subrip, TX3G, MPJEG demuxers and decoders
* Heap Buffer Overflow Write in RLE, MP4, TX3G demuxers and decoders
* Assert failure in AVI, MP4 demuxers and Core
* Null dereferences in CSS, Flac and VTT modules
* Use-after Free in SVG decoder
* Crash in Subtitles core, in jpeg2 inside TS
* Multiple crashes and OOB in CEA-708 subtitles
* OOB read on Oggspot, MP4
* Multiple leaks in MKV, ASF/WMV, CAF and PS demuxers, Ogg, Theora, Vorbis,
WebVTT and SVCD decoders
* Busy loop in WebVTT
(The list above is not exhaustive)


Index: Makefile
===================================================================
RCS file: /cvs/ports/x11/vlc/Makefile,v
retrieving revision 1.289
diff -u -p -u -p -r1.289 Makefile
--- Makefile 1 Nov 2025 11:16:43 -0000 1.289
+++ Makefile 9 Jan 2026 04:06:55 -0000
@@ -1,15 +1,13 @@
COMMENT-main= VideoLAN client; multimedia player
COMMENT-jack= JACK audio output module for VLC

-V= 3.0.21
+V= 3.0.23
DISTNAME= vlc-${V}
PKGNAME-main= ${DISTNAME}
PKGNAME-jack= vlc-jack-${V}
CATEGORIES= x11
SITES= https://download.videolan.org/pub/videolan/vlc/${V}/
EXTRACT_SUFX= .tar.xz
-REVISION-jack= 1
-REVISION-main= 10

USE_NOBTCFI= Yes

@@ -68,10 +66,10 @@ WANTLIB-main += gio-2.0 glapi glib-2.0 g
WANTLIB-main += gpg-error graphite2 gsm gthread-2.0 gtk-3 harfbuzz
WANTLIB-main += hogweed icudata icui18n icuuc idn2 jpeg lz4 lzma matroska
WANTLIB-main += mp3lame nettle nfs notify ogg opus p11-kit pango-1.0
-WANTLIB-main += pangocairo-1.0 pangoft2-1.0 pciaccess pcre2-16 pcre2-8
+WANTLIB-main += pangocairo-1.0 pangoft2-1.0 pcre2-16 pcre2-8
WANTLIB-main += pixman-1 png protobuf-lite rsvg-2 sharpyuv
WANTLIB-main += smb2 sndio soxr speex speexdsp ssl swresample swscale
-WANTLIB-main += tag tar tasn1 theoradec theoraenc tiff udfread unibreak
+WANTLIB-main += tag tasn1 theoradec theoraenc tiff udfread unibreak
WANTLIB-main += unistring usbhid utf8_range utf8_validity va va-drm
WANTLIB-main += va-x11 vorbis vorbisenc vpx wayland-client wayland-cursor
WANTLIB-main += wayland-egl webp webpmux x264 x265 xcb xcb-composite
@@ -88,7 +86,7 @@ WANTLIB-main+= v4l2

WANTLIB-jack= db execinfo jack vlccore ${WANTLIB-common}

-AUTOCONF_VERSION= 2.71
+AUTOCONF_VERSION= 2.69
AUTOMAKE_VERSION= 1.16
AUTORECONF= ./bootstrap

@@ -109,13 +107,12 @@ LIB_DEPENDS-main= ${MODQT5_LIB_DEPENDS}
x11/qt5/qtsvg,-main \
x11/qt5/qtx11extras \
archivers/libarchive \
- archivers/libtar \
audio/libcddb \
audio/libsoxr \
audio/libvorbis \
audio/opus \
audio/speex \
- audio/taglib>=2.0.2 \
+ audio/taglib \
devel/fribidi \
devel/gettext,-runtime \
devel/harfbuzz \
@@ -160,8 +157,7 @@ USE_GMAKE= Yes
LIBTOOL_FLAGS= --tag=disable-static
CONFIGURE_STYLE= autoreconf
MODGNU_CONFIG_GUESS_DIRS= ${WRKSRC}/autotools
-CONFIGURE_ARGS+=--disable-a52 \
- --disable-alsa \
+CONFIGURE_ARGS+=--disable-alsa \
--disable-altivec \
--disable-aom \
--disable-aribb25 \
@@ -172,7 +168,6 @@ CONFIGURE_ARGS+=--disable-a52 \
--disable-crystalhd \
--disable-dav1d \
--disable-dc1394 \
- --disable-dca \
--disable-decklink \
--disable-dsm \
--disable-dv1394 \
@@ -186,9 +181,7 @@ CONFIGURE_ARGS+=--disable-a52 \
--disable-gst-decode \
--disable-kate \
--disable-kwallet \
- --disable-libmpeg2 \
--disable-libplacebo \
- --disable-libva \
--disable-linsys \
--disable-live555 \
--disable-mad \
Index: distinfo
===================================================================
RCS file: /cvs/ports/x11/vlc/distinfo,v
retrieving revision 1.49
diff -u -p -u -p -r1.49 distinfo
--- distinfo 16 Nov 2024 09:26:57 -0000 1.49
+++ distinfo 9 Jan 2026 04:06:55 -0000
@@ -1,2 +1,2 @@
-SHA256 (vlc-3.0.21.tar.xz) = JNu+HX367qCZTV3vC73iABdzRxNtv+Vz9bakzuJa+7A=
-SIZE (vlc-3.0.21.tar.xz) = 25649288
+SHA256 (vlc-3.0.23.tar.xz) = 6JHK5qo8zaab+UFz1RBcvFXHp9mx0hubIWZuae/z5+A=
+SIZE (vlc-3.0.23.tar.xz) = 26486988
Index: patches/patch-compat_Makefile_am
===================================================================
RCS file: /cvs/ports/x11/vlc/patches/patch-compat_Makefile_am,v
retrieving revision 1.4
diff -u -p -u -p -r1.4 patch-compat_Makefile_am
--- patches/patch-compat_Makefile_am 11 Mar 2022 20:17:31 -0000 1.4
+++ patches/patch-compat_Makefile_am 9 Jan 2026 04:06:55 -0000
@@ -4,7 +4,8 @@ plugins is not portable.
Index: compat/Makefile.am
--- compat/Makefile.am.orig
+++ compat/Makefile.am
-@@ -1,7 +1,7 @@
+@@ -1,8 +1,8 @@
+ noinst_HEADERS = stdckdint/stdckdint.h
-pkglib_LTLIBRARIES = libcompat.la
+noinst_LTLIBRARIES = libcompat.la
libcompat_la_SOURCES = dummy.c
Index: patches/patch-configure_ac
===================================================================
RCS file: /cvs/ports/x11/vlc/patches/patch-configure_ac,v
retrieving revision 1.46
diff -u -p -u -p -r1.46 patch-configure_ac
--- patches/patch-configure_ac 19 Mar 2025 11:13:38 -0000 1.46
+++ patches/patch-configure_ac 9 Jan 2026 04:06:55 -0000
@@ -1,7 +1,3 @@
-- libass: fix fontconfig detection
- d19599c42141eaf72cae9a0cb21b5889cd01c860
-- configure: look for backtrace() in libexecinfo
- b3179e1e0993b8c15b735c93282c7675632c183c

Index: configure.ac
--- configure.ac.orig
@@ -16,7 +12,7 @@ Index: configure.ac
;;
netbsd*)
SYS=netbsd
-@@ -1122,22 +1121,6 @@ AC_ARG_ENABLE(optimizations,
+@@ -1170,22 +1169,6 @@ AC_ARG_ENABLE(optimizations,
dnl Check for various optimization flags
AS_IF([test "${enable_optimizations}" != "no"], [

@@ -39,24 +35,7 @@ Index: configure.ac
dnl Check for fast maths
AX_APPEND_COMPILE_FLAGS([-fno-math-errno -funsafe-math-optimizations -fno-rounding-math -fno-signaling-nans -fcx-limited-range], [CFLAGS])
AX_APPEND_COMPILE_FLAGS([-fno-math-errno -funsafe-math-optimizations -fno-rounding-math -fno-signaling-nans -fcx-limited-range], [CXXFLAGS])
-@@ -1246,9 +1229,14 @@ case "${host_cpu}" in
- esac
-
- dnl Check for backtrace() support
--AC_CHECK_HEADERS(execinfo.h)
--AC_CHECK_FUNCS(backtrace)
-+AC_CHECK_HEADERS([execinfo.h])
-+AC_CHECK_FUNCS([backtrace],, [
-+ AC_CHECK_LIB([execinfo], [backtrace], [
-+ LIBEXECINFO="-lexecinfo"])
-+])
-+AC_SUBST(LIBEXECINFO)
-
-+
- dnl
- dnl default modules
- dnl
-@@ -1668,7 +1656,7 @@ AC_ARG_ENABLE(lua,
+@@ -1758,7 +1741,7 @@ AC_ARG_ENABLE(lua,
[disable LUA scripting support (default enabled)])])
if test "${enable_lua}" != "no"
then
@@ -65,55 +44,3 @@ Index: configure.ac
[ have_lua=yes ],
[
AC_MSG_WARN([${LUA_PKG_ERRORS}, trying lua 5.1 instead])
-@@ -2989,25 +2977,6 @@ AS_IF( [test "${enable_telx}" != "no" ],[
- ])
-
- dnl
--dnl libass subtitle rendering module
--dnl
--AC_ARG_ENABLE(libass,
-- [ --enable-libass Subtitle support using libass (default enabled)])
--AS_IF( [test "${enable_libass}" != "no"], [
-- PKG_CHECK_MODULES(LIBASS, [libass >= 0.9.8],
-- [
-- VLC_ADD_PLUGIN([libass])
--
-- AC_CHECK_HEADERS(fontconfig/fontconfig.h,
-- [VLC_ADD_CPPFLAGS([libass],[-DHAVE_FONTCONFIG])
-- VLC_ADD_LIBS([libass],[-lfontconfig])
-- ])
-- ],[
-- AC_MSG_WARN([${LIBASS_PKG_ERRORS}.])
-- ])
-- ])
--
--dnl
- dnl ARIB subtitles rendering module
- dnl
- AC_ARG_ENABLE(aribsub,
-@@ -3346,6 +3315,25 @@ AM_CONDITIONAL([HAVE_FREETYPE], [test "${have_freetype
- AM_CONDITIONAL([HAVE_FONTCONFIG], [test "${have_fontconfig}" = "yes"])
- AM_CONDITIONAL([HAVE_FRIBIDI], [test "${have_fribidi}" = "yes"])
- AM_CONDITIONAL([HAVE_HARFBUZZ], [test "${have_harfbuzz}" = "yes"])
-+
-+dnl
-+dnl libass subtitle rendering module
-+dnl
-+AC_ARG_ENABLE(libass,
-+ [ --enable-libass Subtitle support using libass (default enabled)])
-+AS_IF( [test "${enable_libass}" != "no"], [
-+ PKG_CHECK_MODULES(LIBASS, [libass >= 0.9.8],
-+ [
-+ VLC_ADD_PLUGIN([libass])
-+
-+ if test "${have_fontconfig}" != "no"; then
-+ VLC_ADD_CPPFLAGS([libass],[-DHAVE_FONTCONFIG])
-+ VLC_ADD_LIBS([libass],[${FONTCONFIG_LIBS}])
-+ fi
-+ ],[
-+ AC_MSG_WARN([${LIBASS_PKG_ERRORS}.])
-+ ])
-+ ])
-
- dnl
- dnl SAPI (text to Speech renderer for Windows)
Index: patches/patch-modules_access_nfs_c
===================================================================
RCS file: patches/patch-modules_access_nfs_c
diff -N patches/patch-modules_access_nfs_c
--- patches/patch-modules_access_nfs_c 16 Jul 2025 09:42:36 -0000 1.1
+++ /dev/null 1 Jan 1970 00:00:00 -0000
@@ -1,32 +0,0 @@
-- nfs: fix libnfs API v2 support
- 41f1c168a5a9c5ac5c88ecbbe0f8f4ddef8b999f
-
-Index: modules/access/nfs.c
---- modules/access/nfs.c.orig
-+++ modules/access/nfs.c
-@@ -189,7 +189,8 @@ nfs_read_cb(int i_status, struct nfs_context *p_nfs, v
- else
- {
- p_sys->res.read.i_len = i_status;
-- memcpy(p_sys->res.read.p_buf, p_data, i_status);
-+ if (p_sys->res.read.p_buf != NULL && p_data != NULL)
-+ memcpy(p_sys->res.read.p_buf, p_data, i_status);
- }
- }
-
-@@ -209,9 +210,15 @@ FileRead(stream_t *p_access, void *p_buf, size_t i_len
- return 0;
-
- p_sys->res.read.i_len = 0;
-+#ifdef LIBNFS_API_V2
-+ p_sys->res.read.p_buf = NULL;
-+ if (nfs_read_async(p_sys->p_nfs, p_sys->p_nfsfh, p_buf, i_len, nfs_read_cb,
-+ p_access) < 0)
-+#else
- p_sys->res.read.p_buf = p_buf;
- if (nfs_read_async(p_sys->p_nfs, p_sys->p_nfsfh, i_len, nfs_read_cb,
- p_access) < 0)
-+

No comments:

Post a Comment