Security issue
Posted: 25 Jan 2021 14:56
Hi,
We are considering moving from VLC to VLC-WinRT to benefit from automatic upgrades.
But, we see that last commit dates from August and there's no mention of it in security bulletin VideoLAN-SB-VLC-3012
What's the status of VLC-WinRT? Is its security followed as closely as the "regular" VLC?
Best regards,
Cyrille
PS1: A quick look at the code leads me to think that VideoLAN-SB-VLC-3012 doesn't apply to VLC-WinRT but I'm not 100% sure (I think VideoLAN-SB-VLC-3012 has been fixed by commits around 56cbe9c4b59edbdc5e1bb2687992f3bbf492eccb which change files in the modules/demux folder that don't exist in VLC-WinRT)
PS2: PS1 makes me think that VLC-WinRT is maybe just a wrapper around libvlc. So, shouldn't it be updated to use a version of libvlc that is not vulnerable to VideoLAN-SB-VLC-3012?
We are considering moving from VLC to VLC-WinRT to benefit from automatic upgrades.
But, we see that last commit dates from August and there's no mention of it in security bulletin VideoLAN-SB-VLC-3012
What's the status of VLC-WinRT? Is its security followed as closely as the "regular" VLC?
Best regards,
Cyrille
PS1: A quick look at the code leads me to think that VideoLAN-SB-VLC-3012 doesn't apply to VLC-WinRT but I'm not 100% sure (I think VideoLAN-SB-VLC-3012 has been fixed by commits around 56cbe9c4b59edbdc5e1bb2687992f3bbf492eccb which change files in the modules/demux folder that don't exist in VLC-WinRT)
PS2: PS1 makes me think that VLC-WinRT is maybe just a wrapper around libvlc. So, shouldn't it be updated to use a version of libvlc that is not vulnerable to VideoLAN-SB-VLC-3012?