VLC 3.0.23 Released — What's New and How to Update
VideoLAN has released VLC 3.0.23, the 24th update of the 3.0 "Vetinari" branch. As with recent 3.0.x releases, the emphasis is on stability and security rather than new features: dozens of demuxer, decoder and interface fixes, plus a security patch for a buffer overflow that affected some stream formats. This article breaks down what actually changed and how to update.
What is in the update
The headline changes in 3.0.23 are in the demuxers (the components that read container formats like MP4, MKV, TS and AVI). Several rare but annoying bugs — seeking glitches on fragmented MP4, audio pops after pause on some MKV files, and a crash on truncated TS streams — are fixed. The release also includes the standard refresh of third-party libraries: FFmpeg fixes, updated libbluray and security hardening in the networking stack.
Security relevance
The most important reason to update is a fixed vulnerability in the way VLC parses certain subtitle and stream formats. Exploiting it required a malicious media file, but a one-click update removes the risk entirely. VideoLAN publishes no further details until affected users have updated.
Is it a big jump?
No — 3.0.23 is a point release. If you are on any 3.0.x build, the update is a drop-in replacement that keeps your preferences and playlists. If you are still on VLC 2.x, expect a significantly different (and more capable) interface.
How to update
Open VLC and use Help → Check for Updates, or download the new installer from the official page (videolan.org/vlc) and run it over your existing install. On Linux, update through your package manager: sudo apt upgrade vlc, sudo dnf upgrade vlc or sudo pacman -Syu. On Android, update via Google Play or F-Droid.
What stays the same
VLC 3.0.23 remains a 32-bit/64-bit universal player with the same hardware decoding, the same skin engine and the same Lua extension support. VLC 4.0 is still in development; the 3.0 line remains the recommended stable branch for production use.