vlc 2.2.1, latest desktop release, has a possible code execution bug relating to 3gp (which doesn't have to be the file extension). Most distros have patched it

vlc 2.2.1, latest desktop release, has a possible code execution bug relating to 3gp (which doesn't have to be the file extension). Most distros have patched it, but the videolan releases don't appear to be patched since they're 2.2.1 and since the file modification for one mirror of win32 2.2.1 is last April (of course it would be pathologically stupid to release patched binaries without a new release, but it's possible, and they don't appear to have done either). https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5949 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-59...