The new year starts with a fresh patch for VLC, the legendary media player formerly known as the VideoLAN client, bringing a solid round of fixes and improvements to Windows, macOS, Linux, and more. Version 3.0.23 is now live, and the developers are already gearing up for the next releases.

On the gameplay side of things, several core systems have been tuned. Subtitle handling has been improved, with WebVTT line positioning now behaving as intended instead of wandering off like an NPC with bad pathfinding. The player also shows more detailed audio codec information, which is especially handy for high-quality 24-bit FLAC files. On top of that, the demuxer has been patched so it no longer stumbles over JPEG files that include JFIF headers.

Windows players get their own set of fixes as well. The config_GetUserDir() function has stopped trying to create folders in restricted system locations, image rendering via D3D11 now works properly again, and the Qt interface does a much better job of displaying dark mode without visual glitches.

Several security vulnerabilities closed

Security has also received a serious buff in this update. The developers have eliminated a null dereference issue in libass, fixed undefined shifts in Theora and cc-708, and resolved an integer overflow in Daala. An annoying infinite loop that could occur when parsing H.264 video files has been removed, while buffer overflows in the PNG component and several other format-related overflows have been patched as well.

Groundwork laid for future releases

Beyond the immediate fixes, the team has already started laying the groundwork for future versions of VLC. Early changes are in place to ensure smooth compatibility with upcoming technologies such as taglib 2.0, Qt6, FFmpeg 8, mingw-w64 version 13, and newer releases of libplacebo and pupnp.

For anyone who wants to dive deeper into the patch notes and see every tweak and fix, the full details are available in the official release notes.