Security issue

[StCyr]

Hi,

We are considering moving from VLC to VLC-WinRT to benefit from automatic upgrades.

But, we see that last commit dates from August and there's no mention of it in security bulletin VideoLAN-SB-VLC-3012

What's the status of VLC-WinRT? Is its security followed as closely as the "regular" VLC?

Best regards,

Cyrille

PS1: A quick look at the code leads me to think that VideoLAN-SB-VLC-3012 doesn't apply to VLC-WinRT but I'm not 100% sure (I think VideoLAN-SB-VLC-3012 has been fixed by commits around 56cbe9c4b59edbdc5e1bb2687992f3bbf492eccb which change files in the modules/demux folder that don't exist in VLC-WinRT)

PS2: PS1 makes me think that VLC-WinRT is maybe just a wrapper around libvlc. So, shouldn't it be updated to use a version of libvlc that is not vulnerable to VideoLAN-SB-VLC-3012?

[mfkl]

Hi,

VLC for WinRT the app is not getting any more update unfortunately. Remain on the classic VLC 3.x stable app if security is important to you.

[StCyr]

Thanks for your answer (and for your work more generaly)

Best regards,

Cyrille