I had VLC 64bit v2.2.1 installed on Win7 and Secunia flagged it as NOT secure,indicating I should upgrade to v2.2.2
I prefer to not have Secunia apply the update, so I opened VLC, confirmed that I was running v2.2.1, and selected Help/Check for Updates. I was told "You have the latest version of VLC Media Player". After clicking "Recheck version", I got the same response.
However, after going to the download page for Windows VideoLAN - Download official VLC media player for Windows and clicking the drop-down arrow alongside the "Download VLC" button, then "Installer for 64bit version", I was taken to VideoLAN - Downloads where I got what I needed.
Why isn't VLC detecting its own updates?
(Secunia Advisory SA68087)
CVE Reference(s):
CVE-2015-7981
CVE-2015-8126
Vulnerability:
Where: From remote
Impact: Cross Site Scripting, Exposure of sensitive information, System access