[Solved] Videolan VLC 3.0.13 recommended but not available / Update available !?
-
Seems like @Tom can look into the future!
-
Hi,
Well, this is indeed a bit of a challenge, since 3.0.13 is some what "official", in the sense, that it is a available from one of their download sites, the installer and the exe are signed by the publisher.
And we did see a few other users who installed it already last week.
Also, @OLLI_S sent me this article (how could he forget that already? getting old?):
https://positive.security/blog/url-open-rceSo it is also strongly indicated that 3.0.13 is fixing a vulnerability, though, that isn't official - yet.
Had it not been for the potential security fix, then we would not have recommended it yet.
-
@olli_s Yes, Vulndetect is faster than the light for proposing updates!
@Tom : No doubt that you did that because you have a serious reason.
I checked and the available version is still 3.0.12 on https://www.videolan.org/vlc/download-windows.html .
As I do not use so much VLC, I will let others test. I bet that the next on https://www.videolan.org/vlc/download-windows.html will be a 3.0.14 or higher.
Greg.
-
@tom : One week later still 3.0.12 available for download from https://www.videolan.org/vlc/download-windows.html .
This does not sound good for 3.0.13.
Regards.
-
@gregalexandre Well, yes and no. It was available from one download site and the security details for 3.0.13 are now public.
However, it has already been superseded by 3.0.14.
-
@Tom : I win my bet. 3.0.14 is now available and 3.0.13 was never official.
-
@gregalexandre I agree
/Tom
Download the latest SecTeer VulnDetect agent here:
https://vulndetect.com/dl/secteerSetup.exe -
Is this issue now solved?
-
@olli_s yes. Solved.
-
OK, then I mark this issue as solved.
