22 - 25 March 2018 - FOSSAsia Summit
++ VideoLAN was present in Singapore to speak and meet its asian community around a dedicated booth at the event. +
+ +From gitlab at videolan.org Wed Oct 5 09:19:05 2022 From: gitlab at videolan.org (=?UTF-8?B?RnJhbsOnb2lzIENhcnRlZ25pZSAoQGZjYXJ0ZWduaWUp?=) Date: Wed, 05 Oct 2022 11:19:05 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][master] change trademark application number to registration Message-ID: <633d4c09205b3_1198321db604552894e@gitlab.mail> François Cartegnie pushed to branch master at VideoLAN organization / websites Commits: 8e38ec27 by Francois Cartegnie at 2022-10-05T11:18:27+02:00 change trademark application number to registration - - - - - 1 changed file: - www.videolan.org/legal.php Changes: ===================================== www.videolan.org/legal.php ===================================== @@ -59,7 +59,7 @@
+ VideoLAN was present in Singapore to speak and meet its asian community around a dedicated booth at the event. +
+ +View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/c8b59d46fb5597bb92552226eacc02b7bf2544fc -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/c8b59d46fb5597bb92552226eacc02b7bf2544fc You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Fri Oct 21 07:06:07 2022 From: gitlab at videolan.org (Jean-Baptiste Kempf (@jbk)) Date: Fri, 21 Oct 2022 09:06:07 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][master] Add VLC for Unity page Message-ID: <635244df502b7_11984774c75474978f3@gitlab.mail> Jean-Baptiste Kempf pushed to branch master at VideoLAN organization / websites Commits: 280a193e by Martin Finkel at 2022-10-10T10:23:03+00:00 Add VLC for Unity page - - - - - 5 changed files: - + www.videolan.org/developers/unity.php - + www.videolan.org/images/vlc-unity.png - www.videolan.org/include/footer.php - www.videolan.org/include/menus.php - www.videolan.org/index.php Changes: ===================================== www.videolan.org/developers/unity.php ===================================== @@ -0,0 +1,22 @@ + + +
vlc-unity
is an integration of the LibVLC engine with the Unity 3D game engine.
vlc-unity
is available through git at:
git clone https://code.videolan.org/videolan/vlc-unity
+
+ The source code can browsed at code.videolan.org.
+Contributions can be sent as merge requests in our gitlab repository.
++ VideoLAN is a de-facto pacifist organization and cares about cross-countries cooperations, and + believes in the power of knowledge and sharing. War goes against those ideals. As a response + Russia's invasion of Ukraine, we decided to financially support the United Nations High Commissioner + for Refugees and their work on aiding and protecting forcibly displaced people and communities, + in the places where they are necessary. + s
+===================================== www.videolan.org/press/unhcr.php ===================================== @@ -0,0 +1,35 @@ + + +
VideoLAN is a non-profit organization which develops software for playing and processing multimedia content. It began as a student endeavor at École Centrale Paris (France) in 1996, turned into a multi-national open source project in 2001 and was constituted as a fully separate entity in 2008.
+ +Our objective is to help and foster research, education and development of free and interoperable multimedia solutions. For more than twenty years, we welcome contributions from more than 1000 independent developers from more than 100 countries to fulfill our mission, on numerous pieces of software, including VLC.
+ +As numerous other open-source organizations, we are socially aware and we care a lot about people and our users.
+However, we've always tried to limit our political positions to fights against digital rights management, software patents and for full interoperability. We do this to stay focused on our core mission.
+For other fights like Net neutrality, Free Data archiving, Equal access to development, we've always donated to other non-profits and kept those discussions outside of VideoLAN.
During the ongoing Syrian civil war for the last decade, we saw our software used for information purposes but also for distractions in challenging times. We also received major contributions to our project directly from contested areas resulting in full support for the Arabic language and making our software more accessible.
+ +On February 24 this year, we saw a major disruption with Russia's invasion of Ukraine that likely resulted in tens of thousands of deaths and a permanent change to the political landscape. This led to unprecendented discussions of the VideoLAN board and across the non-profit, knowing that we have French, German and Russian citizens on the board, and we have members from numerous European countries including Ukrainian citizens.
+ +We decided that our current contributions to information liberty were deficient to retain the current state of affairs and that we had to go beyond.
+ +Seeing that in war, the people who suffer are always the normal people and the poor, seeing that open-source reaches everyone and everywhere, we decided to financially support the United Nations High Commissioner for Refugees (UNHCR) and their work on aiding and protecting forcibly displaced people and communities, in the places where they are necessary. We donated 10000€ of our treasury to UNHCR, which is a significant part of our yearly revenue.
+ +VideoLAN is a de-facto pacifist organization and cares about cross-countries cooperations, and believes in the power of knowledge and sharing. War goes against those ideals.
+ +press at videolan.org
+ + View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/943d5b74b9c7dc18c69eb763c0ee48f1bf3196d6 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/943d5b74b9c7dc18c69eb763c0ee48f1bf3196d6 You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Mon Oct 24 05:41:09 2022 From: gitlab at videolan.org (=?UTF-8?B?RmVsaXggUGF1bCBLw7xobmUgKEBma3VlaG5lKQ==?=) Date: Mon, 24 Oct 2022 07:41:09 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][master] unhcr statement: minor formatting fix Message-ID: <635625752b424_11984a46c3c478051a8@gitlab.mail> Felix Paul Kühne pushed to branch master at VideoLAN organization / websites Commits: e16f33f3 by Felix Paul Kühne at 2022-10-24T07:41:03+02:00 unhcr statement: minor formatting fix - - - - - 1 changed file: - www.videolan.org/press/unhcr.php Changes: ===================================== www.videolan.org/press/unhcr.php ===================================== @@ -29,7 +29,9 @@ For other fights like Net neutrality, Free Data archiving, Equal access to develVideoLAN is a de-facto pacifist organization and cares about cross-countries cooperations, and believes in the power of knowledge and sharing. War goes against those ideals.
-press at videolan.org
+Our objective is to help and foster research, education and development of free and interoperable multimedia solutions. For more than twenty years, we welcome contributions from more than 1000 independent developers from more than 100 countries to fulfill our mission, on numerous pieces of software, including VLC.
+ +As numerous other open-source organizations, we are socially aware and we care a lot about people and our users.
However, we've always tried to limit our political positions to fights against digital rights management, software patents and for full interoperability. We do this to stay focused on our core mission.
For other fights like Net neutrality, Free Data archiving, Equal access to development, we've always donated to other non-profits and kept those discussions outside of VideoLAN.
During the ongoing Syrian civil war for the last decade, we saw our software used for information purposes but also for distractions in challenging times. We also received major contributions to our project directly from contested areas resulting in full support for the Arabic language and making our software more accessible.
+ +On February 24 this year, we saw a major disruption with Russia's invasion of Ukraine that likely resulted in tens of thousands of deaths and a permanent change to the political landscape. This led to unprecendented discussions of the VideoLAN board and across the non-profit, knowing that we have French, German and Russian citizens on the board, and we have members from numerous European countries including Ukrainian citizens.
We decided that our current contributions to information liberty were deficient to retain the current state of affairs and that we had to go beyond.
View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/5a6fd73b1d7114d7f44454797eadb36dc7b52c33 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/5a6fd73b1d7114d7f44454797eadb36dc7b52c33 You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Mon Oct 24 09:50:35 2022 From: gitlab at videolan.org (=?UTF-8?B?RmVsaXggUGF1bCBLw7xobmUgKEBma3VlaG5lKQ==?=) Date: Mon, 24 Oct 2022 11:50:35 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][master] Deleted 1 commit: unhcr statement: add screenshots Message-ID: <63565febb5705_1198464baf8c788769c@gitlab.mail> Felix Paul Kühne pushed to branch master at VideoLAN organization / websites WARNING: The push did not contain any new commits, but force pushed to delete the commits and changes below. Deleted commits: 5a6fd73b by Felix Paul Kühne at 2022-10-24T11:41:06+02:00 unhcr statement: add screenshots - - - - - 3 changed files: - + www.videolan.org/images/press/vlc-3.0-ubuntu.jpg - + www.videolan.org/images/press/vlc-3.0-windows11.jpg - www.videolan.org/press/unhcr.php Changes: ===================================== www.videolan.org/images/press/vlc-3.0-ubuntu.jpg ===================================== Binary files /dev/null and b/www.videolan.org/images/press/vlc-3.0-ubuntu.jpg differ ===================================== www.videolan.org/images/press/vlc-3.0-windows11.jpg ===================================== Binary files /dev/null and b/www.videolan.org/images/press/vlc-3.0-windows11.jpg differ ===================================== www.videolan.org/press/unhcr.php ===================================== @@ -15,12 +15,16 @@Our objective is to help and foster research, education and development of free and interoperable multimedia solutions. For more than twenty years, we welcome contributions from more than 1000 independent developers from more than 100 countries to fulfill our mission, on numerous pieces of software, including VLC.
+ +As numerous other open-source organizations, we are socially aware and we care a lot about people and our users.
However, we've always tried to limit our political positions to fights against digital rights management, software patents and for full interoperability. We do this to stay focused on our core mission.
For other fights like Net neutrality, Free Data archiving, Equal access to development, we've always donated to other non-profits and kept those discussions outside of VideoLAN.
During the ongoing Syrian civil war for the last decade, we saw our software used for information purposes but also for distractions in challenging times. We also received major contributions to our project directly from contested areas resulting in full support for the Arabic language and making our software more accessible.
+ +On February 24 this year, we saw a major disruption with Russia's invasion of Ukraine that likely resulted in tens of thousands of deaths and a permanent change to the political landscape. This led to unprecendented discussions of the VideoLAN board and across the non-profit, knowing that we have French, German and Russian citizens on the board, and we have members from numerous European countries including Ukrainian citizens.
We decided that our current contributions to information liberty were deficient to retain the current state of affairs and that we had to go beyond.
View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/5a6fd73b1d7114d7f44454797eadb36dc7b52c33 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/5a6fd73b1d7114d7f44454797eadb36dc7b52c33 You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Mon Oct 24 09:59:24 2022 From: gitlab at videolan.org (=?UTF-8?B?RmVsaXggUGF1bCBLw7xobmUgKEBma3VlaG5lKQ==?=) Date: Mon, 24 Oct 2022 11:59:24 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][master] os-specific: tweak VLC screenshot rotation Message-ID: <635661fcaa6cf_119848ed3d787890419@gitlab.mail> Felix Paul Kühne pushed to branch master at VideoLAN organization / websites Commits: 6dd9c788 by Felix Paul Kühne at 2022-10-24T11:59:12+02:00 os-specific: tweak VLC screenshot rotation - - - - - 3 changed files: - www.videolan.org/include/os-specific.php - + www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg - + www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg Changes: ===================================== www.videolan.org/include/os-specific.php ===================================== @@ -383,7 +383,7 @@ function getScreenshots($os) { "All" => array( array( "name" => "VLC media player - Windows 7 - Qt Interface", - "src" => "//images.videolan.org/vlc/screenshots/1.0.0/fitted_vlc_101_w7_2.jpg" + "src" => "//images.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg" ), array( "name" => "VLC on OS X", @@ -398,8 +398,8 @@ function getScreenshots($os) { "src" => "//images.videolan.org/vlc/screenshots/ios3/ipad-pro-iphone-13-iphone-4s-medium.jpg" ), array( - "name" => "VLC media player - Linux - Gnome", - "src" => "//images.videolan.org/vlc/screenshots/1.0.0/VLC_Gnome.png" + "name" => "VLC media player - Linux - Ubuntu", + "src" => "//images.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg" ), array( "name" => "VLC on Apple TV", ===================================== www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg ===================================== Binary files /dev/null and b/www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg differ ===================================== www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg ===================================== Binary files /dev/null and b/www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg differ View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/6dd9c7886530fad5a5f35185668cdc5b9b21a6e1 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/6dd9c7886530fad5a5f35185668cdc5b9b21a6e1 You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Mon Oct 24 10:16:49 2022 From: gitlab at videolan.org (=?UTF-8?B?RmVsaXggUGF1bCBLw7xobmUgKEBma3VlaG5lKQ==?=) Date: Mon, 24 Oct 2022 12:16:49 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][master] screenshots: refit sizing Message-ID: <635666114dcbe_1198465e480478922a4@gitlab.mail> Felix Paul Kühne pushed to branch master at VideoLAN organization / websites Commits: aac1d880 by Felix Paul Kühne at 2022-10-24T12:16:43+02:00 screenshots: refit sizing - - - - - 2 changed files: - www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg - www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg Changes: ===================================== www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg ===================================== Binary files a/www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg and b/www.videolan.org/vlc/screenshots/3.0.0/3.0-ubuntu-fitted.jpg differ ===================================== www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg ===================================== Binary files a/www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg and b/www.videolan.org/vlc/screenshots/3.0.0/3.0.17-windows11-fitted.jpg differ View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/aac1d880bbc66870e5b0a32aa9ccce2d1b7b7d92 -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/commit/aac1d880bbc66870e5b0a32aa9ccce2d1b7b7d92 You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Tue Oct 25 11:36:12 2022 From: gitlab at videolan.org (David (@dfuhrmann)) Date: Tue, 25 Oct 2022 13:36:12 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites] Pushed new branch 3.0.18-release Message-ID: <6357ca2cb4831_11984e01090c8039924@gitlab.mail> David pushed new branch 3.0.18-release at VideoLAN organization / websites -- View it on GitLab: https://code.videolan.org/VideoLAN.org/websites/-/tree/3.0.18-release You're receiving this email because of your account on code.videolan.org. VideoLAN code repository instance From gitlab at videolan.org Tue Oct 25 11:40:32 2022 From: gitlab at videolan.org (David (@dfuhrmann)) Date: Tue, 25 Oct 2022 13:40:32 +0200 Subject: [www-doc] [Git][VideoLAN.org/websites][3.0.18-release] 2 commits: 3.0.18: Add vlc3018 SB, explaining security issues fixed Message-ID: <6357cb30a9ff3_11984abe793c8040787@gitlab.mail> David pushed to branch 3.0.18-release at VideoLAN organization / websites Commits: e0dfeabf by David Fuhrmann at 2022-10-25T13:40:05+02:00 3.0.18: Add vlc3018 SB, explaining security issues fixed - - - - - 824ae6ee by David Fuhrmann at 2022-10-25T13:40:05+02:00 Release VLC 3.0.18 Add subpage for 3.0.18 VLC release. Also update news file to mention the new release. - - - - - 5 changed files: - www.videolan.org/news.msg - www.videolan.org/security/index.php - + www.videolan.org/security/sb-vlc3018.php - + www.videolan.org/vlc/releases/3.0.18.php - www.videolan.org/vlc/releases/index.php Changes: ===================================== www.videolan.org/news.msg ===================================== @@ -1,5 +1,7 @@ # Comments begin with a # # New topics begin with mechanism# +|28 October 2022|VLC 3.0.18|Today, VideoLAN is publishing the 3.0.18 release of VLC, which adds support for a few formats, improves adaptive streaming support, fixes some crashes and updates many third party libraries. More details on the release page. This release also fixes multiple security issues, which are detailed here. + |24 October 2022|VideoLAN supports the UNHCR|VideoLAN is a de-facto pacifist organization and cares about cross-countries cooperations, and believes in the power of knowledge and sharing. War goes against those ideals. As a response Russia's invasion of Ukraine, we decided to financially support the United Nations High Commissioner for Refugees and their work on aiding and protecting forcibly displaced people and communities, in the places where they are necessary. See our press statement. |20 July 2022|VLC for Android 3.5.0|VideoLAN is proud to release the new major version of VLC for Android. It comes with new widgets, network media indexation, a better tablet and foldable support, design improvements in the audio screen, improved accessibility and performance improvements. ===================================== www.videolan.org/security/index.php ===================================== @@ -19,6 +19,13 @@Those bulletins are related to each VLC release and can be made of multiple security issues, internal and external.
++Summary : Multiple vulnerabilities fixed in VLC media player +Date : October 2022 +Affected versions : VLC media player 3.0.17 and earlier +ID : VideoLAN-SB-VLC-3018 ++ +
A denial of service could be triggered with a wrong mp4 file (div by 0) (#27202)
+Fix crashes with multiple files due to double free (#26930)
+A denial of service could be triggered with wrong oog file (null pointer deref) (#27294)
+Potential bufferoverflow in vnc module could trigger remote code execution if a malicios vnc URL is deliberately played (#27335, CVE-2022-41325)
+ +If successful, a malicious third party could trigger either a crash of VLC or an arbitratry code execution with the privileges of the target user.
+While these issues in themselves are most likely to just crash the player, we can't exclude that they could be combined to leak user informations or +remotely execute code. ASLR and DEP help reduce the likelyness of code execution, but may be bypassed.
+We have not seen exploits performing code execution through these vulnerability
+Exploitation of those issues requires the user to explicitly open a specially crafted file or stream.
+ +The user should refrain from opening files from untrusted third parties +or accessing untrusted remote sites (or disable the VLC browser plugins), +until the patch is applied. +
+ +VLC media player 3.0.18 addresses the issue. +
+ +The vnc module vulnerability was reported and fixed by 0xMitsurugi from Synacktiv (#27335, CVE-2022-41325)
+ + +VLC 3.0 playing 8K 48fps 360 video on Android Galaxy S8 from VideoLAN on Vimeo.
+VLC 3.0 playing 8k60 on Windows 10 using i7 GPU from VideoLAN on Vimeo.
+Ask your favorite packager for VLC 3.0!
+For any questions related to this release, please contact us.
+Those bulletins are related to each VLC release and can be made of multiple security issues, internal and external.
++Summary : Multiple vulnerabilities fixed in VLC media player +Date : October 2022 +Affected versions : VLC media player 3.0.17 and earlier +ID : VideoLAN-SB-VLC-3018 ++ +
If successful, a malicious third party could trigger either a crash of VLC or an arbitratry code execution with the privileges of the target user.
+While these issues in themselves are most likely to just crash the player, we can't exclude that they could be combined to leak user informations or +remotely execute code. ASLR and DEP help reduce the likelyness of code execution, but may be bypassed.
+We have not seen exploits performing code execution through these vulnerability
+Exploitation of those issues requires the user to explicitly open a specially crafted file or stream.
+ +The user should refrain from opening files from untrusted third parties +or accessing untrusted remote sites (or disable the VLC browser plugins), +until the patch is applied. +
+ +VLC media player 3.0.18 addresses the issue. +
+ +The vnc module vulnerability was reported and fixed by 0xMitsurugi from Synacktiv (#27335, CVE-2022-41325)
+ + +VLC 3.0 playing 8K 48fps 360 video on Android Galaxy S8 from VideoLAN on Vimeo.
+VLC 3.0 playing 8k60 on Windows 10 using i7 GPU from VideoLAN on Vimeo.
+Ask your favorite packager for VLC 3.0!
+For any questions related to this release, please contact us.
+- VideoLAN team will be on Open Source Summit Paris. + VideoLAN team will be on Open Source Experience Paris. + (There's no typo, that's exactly 3 years after our last event)