CVS commit: pkgsrc/multimedia/vlc

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sat Jan 10 16:08:56 UTC 2026

Modified Files:
        pkgsrc/multimedia/vlc: Makefile PLIST distinfo options.mk
Removed Files:
        pkgsrc/multimedia/vlc/patches: patch-modules_gui_qt_dialogs_plugins.cpp
            patch-modules_meta__engine_taglib.cpp

Log Message:
multimedia/vlc: Update to 3.0.23

CHangelog:
Changes between 3.0.22 and 3.0.23:
----------------------------------

Codecs:
 * Fix WebVTT line positioning
 * Expose additional audio codec information (notably for Flac 24bit)

Demuxers:
 * fix some JPEG files wih JFIF headers

Windows:
 * config_GetUserDir() no longer tries to create the folder on Windows (#29488)
 * Fix images display with D3D11
 * Improve dark palette in Qt interface
 * Fix compilation of OpenGL modules

Security:
 * Fix null deref in libass, undefined shift in theora and cc-708, integer overflow in daala,
   Infinite loop in h264 parsing, buffer overflow in png and multiple format-overflows

Misc:
 * Prepare compatibility for taglib 2.0, Qt6, FFmpeg8, mingw-w64 v13 and newer versions of
   libplacebo and pupnp

Changes between 3.0.21 and 3.0.22:
----------------------------------

Core:
 * Assume subpictures are in SDR by default

Windows:
 * Add Windows ARM64 builds (Minimum Windows 10 RS5 17763 / 1809)
 * Fix support for Windows XP SP3
 * Allow renaming/moving/deleting of playing file on Windows
 * Restrict SystemParametersInfo calls to Windows XP

Decoders:
 * Fix Opus channel mapping
 * Fix hardware decoding with VideoToolbox of XVID MPEG-4 video
 * Add dav1d-all-layers option
 * Fix DVD CEA-608 captions parsing
 * Fix ProRes 4:4:4:4
 * Disable decoding using libdca, libmpeg2 and liba52 by default in favor of libavcodec

Demuxers:
 * Add support for DMX audio music (MUS) files
 * Handle mkv-use-chapter-codec option
 * Add A_ATRAC/AT1 support in matroska
 * Prevent FLAC seeking logic get stuck
 * Handle pictures in FLAC
 * Fix VOB/AOB LPCM/MLP detection failing occasionally
 * Cut QNap title on first invalid character
 * Fix display of certain JPEG files
 * Fix playback of very short ASF files (duration less than 1s)
 * Multiple fixes in MPEG-TS
 * Fix crashes in multiple demuxers (reported by rub.de, oss-fuzz and others)

Input:
 * Fix SFTP seeking for large files on 32-bit OS

Interface:
 * Qt: Add option to use dark palette
 * Qt: Add compilation support for newer versions of Qt5
 * Qt: Fix scrolling on volume slider
 * macOS: fix crashes when drag'n drop items in the playlist
 * KDE: fix MPRIS state when started from file

Service Discovery:
 * UPnP: remove SAT>IP channel list fallback

Video Output:
 * Use a better stretch mode in wingdi
 * Fetch missing device information when running in UWP

Video Filter:
 * Add AMD GPU Frame Rate Doubler (Direct3D11)
 * Improve visualization of low frequencies in spectrogram

Contrib:
 * Update amf to 1.4.34
 * Update dav1d to 1.5.1
 * Update FFmpeg to 4.4.5
 * Update freetype to 2.13.1
 * Update gettext to 0.22.5
 * Update gcrypt to 1.10.1
 * Update glew to 2.1.0
 * Update gmp to 6.3.0
 * Udpate gnutls to 3.8.10
 * Update harfbuzz to 11.5.0
 * Update iconv to 1.17
 * Update libarchive to 3.8.0 including support for RAR 5.0
 * Update libass to 0.17.3
 * Update libbluray to 1.4.0
 * Update libmatroska to 1.7.0
 * Update libogg to 1.3.6
 * Update libpng to 1.6.50
 * Update libvpx to 1.15.2
 * Update lua to 5.1.5
 * Update openjpeg to 2.5.0
 * Update orc to 0.4.33
 * Update srt to 1.5.3
 * Update taglib to 1.13.1
 * Update zlib to 1.3.1
 * and more 3rd party updates
 * libmpeg2, libdca and liba52 are no longer build by default
 * build ragel inside harfbuzz if necessary

Misc:
 * gnutls: remove manual DH prime bits setting
 * Avoid very large fonts in portrait mode
 * Update of most translations

Many thanks to the Sovereign Tech Agency (https://www.sovereign.tech/), and
especially their Sovereign Tech Fund program, for helping VLC sustainability and safety.
Thanks to oss-fuzz as well for their help and resources to find issues.
Thanks to their support, 3.0.22 becomes the VLC release with the most security fixes ever!

Security:
 * Heap Buffer Overflow READ in TY, NSV, CVDsub, SPU, Subrip, TX3G, MPJEG demuxers and decoders
 * Heap Buffer Overflow Write in RLE, MP4, TX3G demuxers and decoders
 * Assert failure in AVI, MP4 demuxers and Core
 * Null dereferences in CSS, Flac and VTT modules
 * Use-after Free in SVG decoder
 * Crash in Subtitles core, in jpeg2 inside TS
 * Multiple crashes and OOB in CEA-708 subtitles
 * OOB read on Oggspot, MP4
 * Multiple leaks in MKV, ASF/WMV, CAF and PS demuxers, Ogg, Theora, Vorbis,
   WebVTT and SVCD decoders
 * Busy loop in WebVTT
  (The list above is not exhaustive)


To generate a diff of this commit:
cvs rdiff -u -r1.316 -r1.317 pkgsrc/multimedia/vlc/Makefile
cvs rdiff -u -r1.78 -r1.79 pkgsrc/multimedia/vlc/PLIST
cvs rdiff -u -r1.93 -r1.94 pkgsrc/multimedia/vlc/distinfo
cvs rdiff -u -r1.41 -r1.42 pkgsrc/multimedia/vlc/options.mk
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/multimedia/vlc/patches/patch-modules_gui_qt_dialogs_plugins.cpp
cvs rdiff -u -r1.2 -r0 \
    pkgsrc/multimedia/vlc/patches/patch-modules_meta__engine_taglib.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/multimedia/vlc/Makefile
diff -u pkgsrc/multimedia/vlc/Makefile:1.316 pkgsrc/multimedia/vlc/Makefile:1.317
--- pkgsrc/multimedia/vlc/Makefile:1.316        Wed Jan  7 08:48:12 2026
+++ pkgsrc/multimedia/vlc/Makefile      Sat Jan 10 16:08:56 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.316 2026/01/07 08:48:12 wiz Exp $
+# $NetBSD: Makefile,v 1.317 2026/01/10 16:08:56 ryoon Exp $
 
-DISTNAME=              vlc-3.0.21
-PKGREVISION=           17
+DISTNAME=              vlc-3.0.23
 CATEGORIES=            multimedia
 MASTER_SITES=          https://download.videolan.org/pub/videolan/vlc/${PKGVERSION_NOREV}/
 EXTRACT_SUFX=          .tar.xz
@@ -193,7 +192,6 @@ pre-configure:
 
 .include "../../audio/flac/buildlink3.mk"
 .include "../../audio/fluidsynth/buildlink3.mk"
-.include "../../audio/liba52/buildlink3.mk"
 .include "../../audio/libcddb/buildlink3.mk"
 .include "../../audio/libmodplug/buildlink3.mk"
 .include "../../audio/libopus/buildlink3.mk"

Index: pkgsrc/multimedia/vlc/PLIST
diff -u pkgsrc/multimedia/vlc/PLIST:1.78 pkgsrc/multimedia/vlc/PLIST:1.79
--- pkgsrc/multimedia/vlc/PLIST:1.78    Wed Aug  6 09:51:47 2025
+++ pkgsrc/multimedia/vlc/PLIST Sat Jan 10 16:08:56 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.78 2025/08/06 09:51:47 kikadf Exp $
+@comment $NetBSD: PLIST,v 1.79 2026/01/10 16:08:56 ryoon Exp $
 bin/cvlc
 ${PLIST.qt5}bin/qvlc
 bin/rvlc
@@ -218,7 +218,6 @@ lib/vlc/plugins/audio_output/libamem_plu
 ${PLIST.jack}lib/vlc/plugins/audio_output/libjack_plugin.la
 ${PLIST.oss}lib/vlc/plugins/audio_output/liboss_plugin.la
 ${PLIST.pulseaudio}lib/vlc/plugins/audio_output/libpulse_plugin.la
-lib/vlc/plugins/codec/liba52_plugin.la
 lib/vlc/plugins/codec/libadpcm_plugin.la
 lib/vlc/plugins/codec/libaes3_plugin.la
 lib/vlc/plugins/codec/libaraw_plugin.la
@@ -286,6 +285,7 @@ lib/vlc/plugins/demux/libdemux_stl_plugi
 lib/vlc/plugins/demux/libdemuxdump_plugin.la
 lib/vlc/plugins/demux/libdiracsys_plugin.la
 lib/vlc/plugins/demux/libdirectory_demux_plugin.la
+lib/vlc/plugins/demux/libdmxmus_plugin.la
 lib/vlc/plugins/demux/libes_plugin.la
 lib/vlc/plugins/demux/libflacsys_plugin.la
 lib/vlc/plugins/demux/libh26x_plugin.la
@@ -468,7 +468,6 @@ lib/vlc/plugins/video_filter/libmotionbl
 lib/vlc/plugins/video_filter/libmotiondetect_plugin.la
 lib/vlc/plugins/video_filter/liboldmovie_plugin.la
 lib/vlc/plugins/video_filter/libposterize_plugin.la
-lib/vlc/plugins/video_filter/libpostproc_plugin.la
 lib/vlc/plugins/video_filter/libpsychedelic_plugin.la
 lib/vlc/plugins/video_filter/libpuzzle_plugin.la
 lib/vlc/plugins/video_filter/libripple_plugin.la
@@ -552,7 +551,7 @@ share/locale/am/LC_MESSAGES/vlc.mo
 share/locale/am_ET/LC_MESSAGES/vlc.mo
 share/locale/an/LC_MESSAGES/vlc.mo
 share/locale/ar/LC_MESSAGES/vlc.mo
-share/locale/as_IN/LC_MESSAGES/vlc.mo
+share/locale/as/LC_MESSAGES/vlc.mo
 share/locale/ast/LC_MESSAGES/vlc.mo
 share/locale/be/LC_MESSAGES/vlc.mo
 share/locale/bg/LC_MESSAGES/vlc.mo
@@ -650,7 +649,7 @@ share/locale/wa/LC_MESSAGES/vlc.mo
 share/locale/zh_CN/LC_MESSAGES/vlc.mo
 share/locale/zh_TW/LC_MESSAGES/vlc.mo
 share/locale/zu/LC_MESSAGES/vlc.mo
-share/metainfo/vlc.appdata.xml
+share/metainfo/org.videolan.vlc.appdata.xml
 share/vlc/lua/http/css/main.css
 share/vlc/lua/http/css/mobile.css
 share/vlc/lua/http/css/ui-lightness/images/ui-bg_diagonals-thick_18_b81900_40x40.png

Index: pkgsrc/multimedia/vlc/distinfo
diff -u pkgsrc/multimedia/vlc/distinfo:1.93 pkgsrc/multimedia/vlc/distinfo:1.94
--- pkgsrc/multimedia/vlc/distinfo:1.93 Tue Oct  1 11:27:39 2024
+++ pkgsrc/multimedia/vlc/distinfo      Sat Jan 10 16:08:56 2026
@@ -1,15 +1,13 @@
-$NetBSD: distinfo,v 1.93 2024/10/01 11:27:39 nia Exp $
+$NetBSD: distinfo,v 1.94 2026/01/10 16:08:56 ryoon Exp $
 
-BLAKE2s (vlc-3.0.21.tar.xz) = 1e82df56f34b84b388ac77137d326ca36b0afa9597fd52b861630b09f5bf7fb2
-SHA512 (vlc-3.0.21.tar.xz) = cb1af76c8056648c331d7e6e0680d161ed1849eb635987504f45eae02531e9b432651034317fa7e02b0722905dfb9f0f5dad67b5924cc62edcaf0d173ac36aee
-Size (vlc-3.0.21.tar.xz) = 25649288 bytes
+BLAKE2s (vlc-3.0.23.tar.xz) = 3873e239ce1a4ef77288bb8f9dfbef007b601a6ea59148a7ee4cfc64704e3fc0
+SHA512 (vlc-3.0.23.tar.xz) = 557e4ac76a17158877a4a86f27c9a5bc189b7ac559687552117dc8b44961d1172cf93bf8e1eb70fecb05999bdfc3f69ab79b55126c71486fe3a8cdfbf92e6df6
+Size (vlc-3.0.23.tar.xz) = 26486988 bytes
 SHA1 (patch-compat_Makefile.am) = 1c3e0a7c4610c55c3ec9ba80d66b9959661139b3
 SHA1 (patch-configure.ac) = d30a00fe67c95f42f9838a7d5c1a5b694b44a91c
 SHA1 (patch-lib_core.c) = 8ec5557424e6ddc05cc365aacd1ec847d9a94605
 SHA1 (patch-lib_video.c) = 362aaf7977c264bb70a79e98cf18da923ae62e39
 SHA1 (patch-m4_dolt.m4) = 6cf8ef04cc09510132a12df16b95a13e90019878
 SHA1 (patch-modules_access_http_Makefile.am) = d91904c6cba1a75a6872d042e4fe87ed9ce65a22
-SHA1 (patch-modules_gui_qt_dialogs_plugins.cpp) = b5cffc0bd54fd07e77f891f6bca58132d333afdd
-SHA1 (patch-modules_meta__engine_taglib.cpp) = 0d5230627b53e02cf6120fc6457bcfce524b5e8e
 SHA1 (patch-modules_services__discovery_mtp.c) = 5b5b9b341c71a3273178493ae55fccb583f5bd59
 SHA1 (patch-share_Makefile.am) = 4f126948c73159d06aef323b47a702442b5981e8

Index: pkgsrc/multimedia/vlc/options.mk
diff -u pkgsrc/multimedia/vlc/options.mk:1.41 pkgsrc/multimedia/vlc/options.mk:1.42
--- pkgsrc/multimedia/vlc/options.mk:1.41       Sat Apr 27 12:18:10 2024
+++ pkgsrc/multimedia/vlc/options.mk    Sat Jan 10 16:08:56 2026
@@ -1,4 +1,4 @@
-# $NetBSD: options.mk,v 1.41 2024/04/27 12:18:10 pho Exp $
+# $NetBSD: options.mk,v 1.42 2026/01/10 16:08:56 ryoon Exp $
 
 PKG_OPTIONS_VAR=               PKG_OPTIONS.vlc
 PKG_SUPPORTED_OPTIONS=         alsa avahi dbus debug dts jack pulseaudio
@@ -162,7 +162,7 @@ PLIST.vaapi=                yes
 .include "../../multimedia/ffmpeg4/buildlink3.mk"
 .else
 CONFIGURE_ARGS+=       --disable-libva
-.include "../../multimedia/ffmpeg6/buildlink3.mk"
+.include "../../multimedia/ffmpeg8/buildlink3.mk"
 .endif
 
 ## VDPAU support