Installed Version 0.8.6i but File Version is 0.8.6g

[rockitt]

I recently downloaded and ran the latest version of VLC player from the VLC website using the installation file vlc-0.8.6i-win32.exe. However, after running the installation, Secunia Personal Software Inspector is showing the version to be insecure and that the version it detects is 0.8.6g.

I opened the VLC player and checked for the version under Help. It shows VLC Media Player 0.8.6i Janus (wxWidgets interface). I then checked the application VLC.exe and the file version shows 0.8.6g, created July 10, 2008.

I've downloaded and ran the installation package twice and had the same result. Any suggestions??

Thanks,
rockitt

[Arite]

Yes, the "File Version" for vlc.exe is still 0.8.6g. If when you run:

Code: Select all

vlc --version

It states 0.8.6i then there is no problem.

The same occurred for 0.8.6h:
viewtopic.php?f=14&t=47331

As far as I know it is just due to a VLC version parameter not being updated.

Cheers, Arite.

[rockitt]

Thanks for the response, though it does seem a little confusing that the file version doesn't match the actual version of the player.

[Arite]

Just run vlc --version here is the output :

Code: Select all

VLC version 0.8.6f Janus Compiled by jb@Sasmira. Compiler: gcc version 3.4.5 (mingw special) This program comes with NO WARRANTY, to the extent permitted by law. You may redistribute it under the terms of the GNU General Public License; see the file named COPYING for details. Written by the VideoLAN team; see the AUTHORS file.

Then I re-downloaded the win32 *.exe binary and got:

Code: Select all

VLC version 0.8.6h Janus Compiled by jb@Sasmira. Compiler: gcc version 3.4.5 (mingw special) This program comes with NO WARRANTY, to the extent permitted by law. You may redistribute it under the terms of the GNU General Public License; see the file named COPYING for details. Written by the VideoLAN team; see the AUTHORS file.

The vlc.exe "File Version" is still 0.8.6g. Anyway - seems like there have been numerous file version update issues since 0.8.6f, however regardless of that the bugfixes have been applied AFAIK (Win32 build still crashes on taking snapshots).

Cheers, Arite.

[jennifermapco]

You installed twice but it is not updated. It may be error in the downloaded file, so download fresh copy and install it.

MOD EDIT: Removed advertising

[CaterSoke]

The wrong file version is very annoying to me. I use "Secunia Personal Software Inspector" to keep my pc's up-to-date. And now I have false alarms. Is removing VLC from my pc the only solution?

[VLC_help]

You can also do some hex editing

[CaterSoke]

Oh, I forgot the existence of Hexedit ..
I changed the value at position 17437 from 67 to 69, but that seems not to be sufficient. Any advice?

[Arite]

You can also use a resoure editor tool such as Resource Hacker. Just open vlc.exe with it, change the "File Version" from "0.8.6g" to "0.8.6i", press "Compile Script" and then re-save the *.exe file. Whether that will work correctly with "Secunia Personal Software Inspector" I do not know, however the resulting "File Version" does change.

Arite.

[CaterSoke]

I changed the version using Resource Hacker. (Thx for the tip). But I still have the same problem as when I used HexEdit. In the .exe the version is changed from "g" to "i". The property-window shows the version: 0.8.6i but "Secunia Personal Software Inspector" says it found version: 0.8.6h. yes "H". I don't know where that comes from.
I think I better exclude the VLC-directory from scanning with PSI. I hope I will have less problems with the "j"-version.
Thanks again for the tips you have given to me.

[Arite]

Well last time I checked "vlc --version" returned "0.8.6h" as the version so it could be checking that. Best thing would be to re-compile probably for that. 0.8.6i has the snapshot bug on Windows too so a 0.8.6j release wouldn't be unreasonable.

Cheers, Arite.

[jd_denver]

I'm running into this same issue. Secunia PSI tells me that 0.8.6g is insecure, and that I need 0.8.6i. It provides a link to download that. I've used Secunia's link, and I've gone directly to the videolan site to download 0.8.6i. After I've installed, Secunia still says I need 0.8.6.i, and that I have 0.8.6h now. Help/About in VLC says it's 0.8.6i, but "VLC --version" says it's 0.8.6h. Grr.

I'm hoping there will soon be a secure version available that reports its version number consistently, and that Secunia recognizes as secure. Since Arite has mentioned that the current "i/h" version still has a snapshot bug, perhaps the inconsistency in version numbers can be fixed along with that.

[j_hallgren]

Wishing I'd have found this thread instead of the other similar one (viewtopic.php?f=14&t=48650) where I posted as this is more complete.

Anyway, I'm having same issue so add me to list of people who are affected.

[startreksuite]

I have this problem with secunia and vlc, and it was rectified by vlc in previous versions, so hopefully they can fix this one too. great program!

[VLC_help]

viewtopic.php?f=14&t=49163
try that build

[startreksuite]

just jumped to that thread and downloaded the file. Then ran secunia. Thanks to the people who fixed it, 'cause Secunia says it's patched

[Jean-Baptiste Kempf]

You are welcome.