Page 1 of 1

Is there a way I can determine what versions of each component are in a specific release?

Posted: 06 Jun 2016 16:36
by sabex
While researching VLC, I found some references to a security vulnerability in Live Networks Live555 Streaming Media .

Code: Select all

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash)
How would I know which version of that module is included in a given build of VLC Media Player?

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 07 Jun 2016 09:29
by jayR
You may need to see source codes.

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 08 Jun 2016 00:41
by Ludrax

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 08 Jun 2016 10:51
by Rémi Denis-Courmont
You need to look it up in the source code.

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 13 Jun 2016 17:23
by sabex
I am not sure I understand the relevance of this post.
it links to another post which seems to imply I should see something in the Messages or Pugins window but does not show me how to get any output there.

I was able from the plugins window to see that it uses Live555 which I already knew; but not which version of it.

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 13 Jun 2016 20:57
by Rémi Denis-Courmont
Repeating Jay and myself, but if a library is linked statically, you can find the library version from the VLC version source code.

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 13 Jun 2016 22:51
by sabex
Repeating Jay and myself, but if a library is linked statically, you can find the library version from the VLC version source code.
I understand that.
but, C++ or at least thats what it looks like is not exactly 'noob' friendly. I am hoping there is another way that does not require me to learn how to code.
for example, i dont even know what 'linked statically' means

Re: Is there a way I can determine what versions of each component are in a specific release?

Posted: 14 Jun 2016 12:39
by Rémi Denis-Courmont
In general, that's not possible.