VLC 3.0 Vetinari Released

Thanks!

PS: I already downloaded 3.0.18 from the official site and changed 18 into 19 to get the correct DMG...

 

I use VLC on Win 8.1 because MPC couldn't correctly play certain videos. And I didn't feel like having to fool around with codec packs again. But I don't see any difference when it comes to picture quality, I do mostly download videos from YouTube though. But major bummer that you have to install a plugin for this basic feature.

 

There is a built-in option by using "Gestures". Follow this link to enable gesture support:

https://www.vlchelp.com/how-to-use-mouse-gestures/

If you set your gesture trigger button as the default left mouse click, then all you need to do is to click the left mouse button, keeping it pressed, move the mouse to left and then back to right, or right and then back to left. This will toggle pause/play.

Seems a stupid way of toggling pause/play, but this is the only built-in function available at the moment.

 

OK cool, thanks for the tip. A mouse gesture sounds like a better solution.

 

VLC Media Player 3.0.20
Oct 31,2023
https://www.majorgeeks.com/files/details/vlc_media_player.html

https://code.videolan.org/videolan/vlc/-/raw/3.0.x/NEWS

 

Sorry @Rasheed187 that you couldn't get MPC-HC to work for you right. That's a fabulous player that is one notch above VLC on my 8.1's and plays flawless WITHOUT adding ANY codecs.

That said VLC is still a vital secondary on my systems and sometimes use it first.

 

Windows only (so far)?

(I don’t see a macOS build)

 

Thanks

 

On Kubuntu 22.04 LTS, the available repository version for VLC media player is 3.0.16.
Snap version 3.0.19 is available (3.0.20 as beta), but is not default on Kubuntu 22.04.
For other LTS distros, the situation may be similar.
I'm not sure if there are any security fixes in recent VLC media player versions that are essential for VLC media player on Kubuntu.

Leaving aside whether security fixes in recent VLC media player versions are essential on Kubuntu -
Recently, with VLC media player 3.0.16 on Kubuntu 22.04, playing MP4 videos, I noticed skip forward caused the application to crash and exit. Other actions might have the same result, I haven't tested that.
This was with Preferences \ Input/Codecs \ Codecs \ Hardware-accelerated decoding: Automatic (which is default).
Switching Hardware-accelerated decoding 'Automatic' to 'VA-API video decoder via DRM' resolved the issue for both my NVIDIA GPU system and my Intel GPU system.
Other available options are 'VA-API video decoder' (works for my NVIDIA GPU system), 'VDPAU video decoder' (works for my Intel GPU system), and 'Disable' (if no other setting works).

 

I guess that also depends on if VLC uses Kubuntu's 3rd party libraries or it has bundled it's own. With the recent VP9 zeroday fix for example, Firefox still needed to be updated on Fedora even though Fedora's libvpx had already been updated, because Firefox did not use the system library.

 

Thanks.
On Kubuntu, VLC media player has its own libvlccore library package, and several other packages, I haven't checked if there are any vulnerabilities in those. Last June, several VLC packages had ESM (Expanded Security Maintenance) upgrades, as part of Ubuntu Pro. I hope ESM keeps an eye on VLC security patching.
I'm not overly concerned about it.
I was more worried when I noticed skip forward caused the application to crash. I was glad I could fix it.

 

There is finally a release page for 3.0.19/20:
https://www.videolan.org/vlc/releases/3.0.20.html
Also 2 security advisories for first party vulnerabilities:
https://www.videolan.org/security/sb-vlc3019.html
https://www.videolan.org/security/sb-vlc3020.html

 

Thanks, much appreciated.

 

VLC 3.0.21 released:

https://code.videolan.org/videolan/vlc/-/raw/3.0.x/NEWS
Download:
https://downloads.videolan.org/pub/videolan/vlc/3.0.21/

 

Why is FFmpeg still on version 4.4.4 ?
Latest stable release is 7.0.1

Is that in regard to support for older systems?

Copilot says:

(Sorry for the first 2 Bing links; Copilot did that. Better go to https://ffmpeg.org/security.html)

 

Where is the installation file for this version ?

 

- Well, then that new download has been made available in say the last hour.
- I'll download the installation file tomorrow. It seems A LOT OF people want to download the program at the same time.

 

That is a good point!

Not only is VLC missing the security patches, but it is also missing all the new features and enhancements that were introduced in v5, v6, and v7 of FFmpeg.

FFmpeg v4.4 was released on 2021-04-08. FFmpeg v4.4.4 is a dot release of the same branch and was released on 2023-04-12, more than a year ago!

 

Now I was able to download the installation file with both Europe and the US still asleep there was (much) less internet traffic.

 

Copilot doesn't seem to understand that multiple versions are supported at the same time. Some of those CVE's are fixed in 4.4.4 as well.
CVE-2022-3964 was fixed in 4.4.4, 5.1.3 and 6.0. So at the time of 6.0 release, 4.4.4 was still up to date. Since then 3 CVE's are listed on the ffmpeg security page. The question is now if 4.4.4 is EOL or not and if those 3 CVE's affect 4.4.4 as well or only newer versions.