Web Plugin 2.0.8 Not Installing Firefox

[Ludrax]

from their forum

Based on what I read earlier in this thread, the 2.0.6 plugin worked fine, so the version number wasn't incremented when versions 2.0.7 and 2.0.8 of the program were released. However, the plugin check site is looking for the program version numbers. Unless something new has been released. plugin 2.0.6 is current. Hopefully this mismatch will be updated soon.

[Danny Fox]

I agree with most of the recent posts: VLC should change its plugin version to be the current release ID (2.0.8 ) so that FireFox can find and check it. This gives consistency between what we have and what we see.

Otherwise, if we (the users) ignore the 2.0.6 warning (or patch the 2.0.6 plugin to spoof being 2.0.8 ), then WHAT HAPPENS if 2.0.8 (or later) has an issue? We'll never see it, because FireFox says 2.0.6 is vulnerable, we're running 2.0.8 thinking it's invincible, and some hacker is creating havoc under our noses.

[Rémi Denis-Courmont]

If the VLC web plugin has an issue, you'll see it. If any other of the tens of underlying dependencies has an issue, you won't see it, at least not with the plugin version number.

The problem exists either way. You cannot rely on a version number that is not what you think or wish it to be, but is not. Period.

[maraf]

So what now ?
Are we waiting for the plugin number increase, or for mozilla developers to code internal dependencies of VLC modules into their products ?

[mbgtmari]

I guess we are waiting for Mozilla to take away "Vulnerable". As Jean-Baptiste said on Sun Aug 18, 2013 12:37 pm: "The plugin is unchanged between 2.0.6 and 2.0.8" (so plugin 2.0.6 is current). If you don't like seeing Mozilla's notion of vulnerability use another browsercheck. Launch BrowserCheck

It will tell you that your VLC Web Plugin 2.06 is Up To Date (File checked: npvlc.dll Installed File Version: 2.0.6)

[Jean-Baptiste Kempf]

Or wait for VLC 2.1.0

[BBm]

Two questions then:
1) When can we expect version 2.1.0?
2) How should Mozilla detect the right version? Is there a API defined by Mozilla but not used?

[Jean-Baptiste Kempf]

1) this week.
2) no idea.

[BBm]

1) this week.

Thx

2) no idea.

How can you then state, that Mozilla isn't able to determine the version the right way?
If it is known that version x.y of a plugin and/or the associated program has issues, the browser must test whether the installed plugin is newer. To do that it must determine the version number. This can be done by asking the interface ( this is the plugin! ) to the application. The normal way is to ask for the version of the DLL, which represents the plugin.
Exactly this is done. But the information given by the VLC Web Plugin is false!

[Jean-Baptiste Kempf]

Nope. The plugin is 2.0.6 and is correct.

[mbgtmari]

BBm,
click on "Launch a quick scan now" here: https://browsercheck.qualys.com/
and you will see that your VLC Web Plugin is Up To Date
I wrote the link in my previous message but I must have deleted it by mistake when I edited the post.

If Qualys can check the plugins in the right way why can't Mozilla's plugincheck do it?

[gopiraajvs]

The problem does not appear to be with Firefox - rather with VLC. For XP, after installation of Version 2.0.8, go to VLC program folder and right click on file npvlc.dll and then left click on Properties. Click the Version tab and it says 2.0.6. So the 2.0.8 download contains an updated desktop program, vlc.exe (version 2.0., but an old web plug-in file, npvlc.dll (version 2.0.6). In order for the problem to be solved, I believe VideoLan must update the web plug-in.

[BBm]

BBm,
click on "Launch a quick scan now" here: https://browsercheck.qualys.com/
and you will see that your VLC Web Plugin is Up To Date
I wrote the link in my previous message but I must have deleted it by mistake when I edited the post.

If Qualys can check the plugins in the right way why can't Mozilla's plugincheck do it?

Qualys also finds only version 2.0.6! and states it as uptodate.
Two errors:
- false version number in the .dll ( error by VLC )
- stating 2.0.6 as uptodate when there is a version 2.0.8 of VLC
--> Qualys isn't reliable.

[Rémi Denis-Courmont]

The only VLC web plugin bug is that the XPI file has the wrong name (saying 2.0.8 while there is no such version of the web plugin and the current version is 2.0.6).

The rest is a Mozilla bug or Mozilla pretending to dictate how VideoLAN should number their versions, depending on your stand.

[Jean-Baptiste Kempf]

Fixed.