Security Advisory - Version 0.9 Download not listed (website

[Lyberty]

Okay, so the videolan.org home page says "Fixes for these issues are available in VLC 0.9. We strongly recommend all users to update to this new version."

Well, that's great and all, but the very same web page, the download page, the wiki page, etc etc
still list (as of Sept 9 2008) 0.8.6i
as the most recent version
available for download.

(Adding a link to the newer version at this thread is great and all, but this is a bug request against the VLC websites -- to help all current incoming visitors.)

Please forward to those with access to the website and wiki. Thank you.

[dionoea]

The Note: at the end of the news item should be clear enough A release for windows and os x is coming, be patient (we're fixing the last release critical bugs for windows).

[Lyberty]

Thank you for the prompt reply.

See also (for everyone else) :

Duplicate (found after drafting mine) post at
viewtopic.php?f=10&t=49803

[Lyberty]

...Unfortunately, it isn't clear.

Suggested rewording for the News item :

"VLC media player versions 0.8.6i and older suffer from multiple buffer overflow vulnerabilities. Refer to our advisory for technical details. Fixes for these issues will be available in VLC 0.9. We strongly recommend all users to update to this new version when it is released (in early September)."

Thank you for considering.

[dionoea]

This is what I read when I check www.videolan.org:

VLC media player versions 0.8.6i and older suffer from multiple buffer overflow vulnerabilities. Refer to our advisory for technical details. Fixes for these issues are available in VLC 0.9. We strongly recommend all users to update to this new version.
Note: a binary VLC 0.9 release should be available for Windows and Mac OS X users in a few days.