G .exe in the H installer?

[hays33d]

Updated VLC because of a Secunia.com alert on a vulnerability. When I installed version H, it still came up as insecure because the vlc.exe file is version G still.

Is this by design? Seems broken to me.

[Jean-Baptiste Kempf]

what? what does VLC --version says ?

[hays33d]

Under Help/About it does say version H. However in the properties of vlc.exe it says version G. Thus the security program say it is still running a vulnerable version.

Anyone have different?

[Arite]

The build from the official website states that vlc.exe "File version" is 0.8.6.0. In the Properties it does state (for the "File Version" under "Other version information") that is is 0.8.6g though.

vlc --version is fine:

Code: Select all

VLC version 0.8.6f Janus Compiled by jb@Sasmira. Compiler: gcc version 3.4.5 (mingw special) This program comes with NO WARRANTY, to the extent permitted by law. You may redistribute it under the terms of the GNU General Public License; see the file named COPYING for details. Written by the VideoLAN team; see the AUTHORS file.

Arite.

[hays33d]

RE: "version is fine"

Are you saying that even though the executable is the G version that this vulnerability is fixed?

http://secunia.com/advisories/30560/

[Arite]

Yes the vulnerability is fixed, just presumably one version variable was not updated:
http://wiki.videolan.org/Changelog/0.8.6h

The libraries affected are separate to vlc.exe too.

Arite.