[Solved] Videolan VLC 3.0.13 recommended but not available / Update available !?

[OLLI_S]

Seems like @Tom can look into the future!

[Tom]

Hi,

Well, this is indeed a bit of a challenge, since 3.0.13 is some what "official", in the sense, that it is a available from one of their download sites, the installer and the exe are signed by the publisher.

And we did see a few other users who installed it already last week.

Also, @OLLI_S sent me this article (how could he forget that already? getting old?):
https://positive.security/blog/url-open-rce

So it is also strongly indicated that 3.0.13 is fixing a vulnerability, though, that isn't official - yet.

Had it not been for the potential security fix, then we would not have recommended it yet.

[GregAlexandre]

@olli_s Yes, Vulndetect is faster than the light for proposing updates!

@Tom : No doubt that you did that because you have a serious reason.

I checked and the available version is still 3.0.12 on https://www.videolan.org/vlc/download-windows.html .

As I do not use so much VLC, I will let others test. I bet that the next on https://www.videolan.org/vlc/download-windows.html will be a 3.0.14 or higher.

Greg.

[GregAlexandre]

@tom : One week later still 3.0.12 available for download from https://www.videolan.org/vlc/download-windows.html .

This does not sound good for 3.0.13.

Regards.

[Tom]

@gregalexandre Well, yes and no. It was available from one download site and the security details for 3.0.13 are now public.

However, it has already been superseded by 3.0.14.

[GregAlexandre]

@Tom : I win my bet. 3.0.14 is now available and 3.0.13 was never official.

[Tom]

@gregalexandre I agree :+1:

[OLLI_S]

Is this issue now solved?

[GregAlexandre]

@olli_s yes. Solved.

[OLLI_S]

OK, then I mark this issue as solved.