VLC Player 3.0.8 released

Sicherheit[German]Another little addendum: The developers of VideoLan have just released the VLC Player version 3.0.8 for Linux, macOS and Windows.


Advertising

The colleagues from deskmodder.de noticed this. The change log shows the following changes between version 3.0.7 and 3.0.8:

Core:
* Fix stuttering for low framerate videos

Demux:
* Fix channel ordering in some MP4 files
* Fix glitches in TS over HLS
* Add real probing of HLS streams
* Fix HLS MIME type fallback

Decoder:
* Fix WebVTT subtitles rendering

Stream filter:
* Improve network buffering


Advertising

Misc:
* Update Youtube script

Audio Output:
* macOS/iOS: Fix stuttering or blank audio when starting or seeking when using
   external audio devices (bluetooth for example)
* macOS: Fix AV synchronization when using external audio devices

Video Output:
* Direct3D11: Fix hardware acceleration for some AMD drivers

Stream output:
* Fix transcoding when the decoder does not set the chroma

Security:
* Fix a buffer overflow in the MKV demuxer (CVE-2019-14970)
* Fix a read buffer overflow in the avcodec decoder (CVE-2019-13962)
* Fix a read buffer overflow in the FAAD decoder
* Fix a read buffer overflow in the OGG demuxer (CVE-2019-14437, CVE-2019-14438)
* Fix a read buffer overflow in the ASF demuxer (CVE-2019-14776)
* Fix a use after free in the MKV demuxer (CVE-2019-14777, CVE-2019-14778)
* Fix a use after free in the ASF demuxer (CVE-2019-14533)
* Fix a couple of integer underflows in the MP4 demuxer (CVE-2019-13602)
* Fix a null dereference in the dvdnav demuxer
* Fix a null dereference in the ASF demuxer (CVE-2019-14534)
* Fix a null dereference in the AVI demuxer
* Fix a division by zero in the CAF demuxer (CVE-2019-14498)
* Fix a division by zero in the ASF demuxer (CVE-2019-14535)

Contribs:
* Update to a newer libmodplug version (0.8.9.0)

In addition to various bug fixes, several vulnerabilities have also been closed, including in the MKV-Demuxer. The new player is available on this website for Linux, macOS, Windows and operating systems. Make sure that you really download and install the new version. Currently the 3.0.7.1 for Windows is offered. The current version is already available on the FTP servers.


Advertising

This entry was posted in Software, Update and tagged , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: Please note the rules for commenting on the blog (first comments and linked posts end up in moderation, I release them every few hours, I rigorously delete SEO posts/SPAM).