-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Sep 2026 06:49:02 +0200
Source: vlc
Architecture: source
Version: 3.0.24-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Changes:
 vlc (3.0.24-0+deb13u1) trixie-security; urgency=medium
 .
   * New upstream version 3.0.24
     - Fix memory-safety vulnerabilities when processing crafted media
       (CVE-2026-56711, CVE-2026-73324)
   * debian/upstream: Update upstream signing key
   * debian/: Add librist-dev for new rist plugin
Checksums-Sha1:
 d924bb4cb7671129bc4a4d076c19c84900dac523 5642 vlc_3.0.24-0+deb13u1.dsc
 dae683b3939220eac4a5edfc816c44e00659e68f 27620304 vlc_3.0.24.orig.tar.xz
 ea89c5032311deb384b00a838a36e54ef2097fab 866 vlc_3.0.24.orig.tar.xz.asc
 1b4765a4f200cdb911e4b961bde58388c2bb8bdd 66804 vlc_3.0.24-0+deb13u1.debian.tar.xz
 b728c73adf73062b893c740081f2db2002574a24 38158 vlc_3.0.24-0+deb13u1_amd64.buildinfo
Checksums-Sha256:
 7e78d5c6ee50d174b7d246c283499fe95e02e7f7ce7f5d708342e9bce8e6c502 5642 vlc_3.0.24-0+deb13u1.dsc
 e7cab503d1d7d5849b89d2cf0e1ee60d0ef6d012407791b644b9cfc0cc225fdf 27620304 vlc_3.0.24.orig.tar.xz
 c3ff247653cf031cabe5e0c8551703adf468a15c3e078ca458ab1393ea20bf01 866 vlc_3.0.24.orig.tar.xz.asc
 afb50343052c5e5a683f4b46f47d6769f315974cdc04620f34e51530502a7cb1 66804 vlc_3.0.24-0+deb13u1.debian.tar.xz
 a93fda4fd0939ff4ce81699825c4702e5dc53507520694cb9701872416dec754 38158 vlc_3.0.24-0+deb13u1_amd64.buildinfo
Files:
 bf81aa1b8b4bb6951c819990135e42f8 5642 video optional vlc_3.0.24-0+deb13u1.dsc
 c10ef9a34204bc0b5cadc8b9a19dea7c 27620304 video optional vlc_3.0.24.orig.tar.xz
 0e27069530a06b0a538c9b24106274c3 866 video optional vlc_3.0.24.orig.tar.xz.asc
 06bddc027913e8e6827bd44a9fe009b0 66804 video optional vlc_3.0.24-0+deb13u1.debian.tar.xz
 4d611d06c228de5dade41ac511d5771c 38158 video optional vlc_3.0.24-0+deb13u1_amd64.buildinfo


-----BEGIN PGP SIGNATURE-----

wr0EARYKAG8Fgmq0sDUJECGTazZgD82JRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ9su77itA1og9xQIDVM8/NSRzq470benojcTHPqE0Yrj
FiEEQmJ+hB2ZZ9qD4fqQIZNrNmAPzYkAAKPBAQCchDYZCvIuDenG0qh7BbtbmTVk
rMXs4LIp3yoNE0pzfwEAsQgm7afvmK4BqoxovcuxwxHlEYCzAZMCQl9g5Bnd9gk=
=xvPo
-----END PGP SIGNATURE-----