VLC Media Player 3.0.21 (MSI-x64)?

[iamr00t]

We are updating VLC for EXE x86, EXE x64. and MSI x64. I am seeing that this new release 3.0.21 does not seem to have a version for MSI x64. Is that per the developer or something we need make plans for? We have 1275 on EXE x64 but we also have 972 on MSI x64, so we will need to work through migrating them all to EXE x64 if this new version will not be updated any longer. Please let us know.

[Dan Gough (Patch My PC)]

We are monitoring their site for a new MSI:
https://get.videolan.org/vlc/3.0.21/win64/

Here is a thread on the vendor forum about it that is now locked:
https://forum.videolan.org/viewtopic.php?t=164735

Their MSI was problematic due to being compiled on Linux rather than Windows, so they may have run into some build issues:
https://code.videolan.org/videolan/vlc/-/issues/18985

If we decide to pull this from our catalog, we can add a pre-script to the EXE release to remove the MSI version.

[A-star]

We are monitoring their site for a new MSI:
https://get.videolan.org/vlc/3.0.21/win64/

Here is a thread on the vendor forum about it that is now locked:
https://forum.videolan.org/viewtopic.php?t=164735

Their MSI was problematic due to being compiled on Linux rather than Windows, so they may have run into some build issues:
https://code.videolan.org/videolan/vlc/-/issues/18985

If we decide to pull this from our catalog, we can add a pre-script to the EXE release to remove the MSI version.

Is there any update about this?

[iamr00t]

I concur in asking for an update. I agree that this should generally on the software vendor, but if you offered to script the removal of the MSI version, that would work around this vendor's lack of action.

[Dan Gough (Patch My PC)]

There is another post here where the developers have stated they ran into issues but still intend to get an MSI working:

https://code.videolan.org/videolan/vlc/-/issues/28677

[A-star]

To be frank, that post dates from 2 months ago.
I would rather remove the MSI version at this point and just use the exe version

[rquigley]

Hi Dan, we'd appreciate an option to rollover our clients from MSI to EXE for VLC since it might be a while before this is resolved, can we have a seperate SKU for VLC just for this purpose?

[Dan Gough (Patch My PC)]

I will discuss this internally - but normally we only configure updates to be able to detect and migrate from a different package type (e.g. EXE->MSI or x86->x64) when the vendor just offers a single installer type and they changed it.

There are a few options at your disposal to migrate users over - for example you can create a pre-script that will allow the EXE variant to uninstall the MSI (this script can help), then push this out to a collection of all devices that have the MSI variant installed.

[steadybird]

I've looped into this situation via some rather loud CVE's on our Defender dashboard.
Though I am wondering if perhaps we are over thinking the problem?

Could we not just set the Exe version of VLC to supersede (With uninstall) the MSI version? Then target the exe to the same endpoints as the MSI?

I understand that PMPC doesn't have these options and would need to be done directly in Intune/SCCM.

[Dan Gough (Patch My PC)]

Yes that would also work, with a few caveats:

- With ConfigMgr, the latest Application would resolve as being installed even if it was installed manually outside of ConfigMgr. Using supersedence here would work, and the option should be selected to uninstall the superseded product. You should also be able to set the EXE deployment settings to automatically upgrade any superseded products.

- Intune will not automatically evaluate the detection script of every available app to determine if it's installed, unless installation has been attempted at least once. Therefore you should supersede both the Application and Update - and if somebody installed it manually themselves, the published apps won't be recognised as installed, and so the supersedence rule may not apply.

[[email protected]]

Well, the heck with it.
We wrote a script, and removed the MSI on 2,500 devices, killed the package in SCCM, and using PatchMyPC, built the package as an .exe and deployed it as Install/Required.

It stinks, but we needed to clear the vulnerability in our endpoint tools, so...

6 of one, half dozen of the other, but Patch My PC will take care of the updates going forward, so... easiest way to get it done I guess.

[Donatello76]

We also need to get VLC updated to satisfy our security audits.

Is there a reason why setting the MSI installer to uninstall for all devices, and then setting the exe to install for all devices wouldn't work?

[Dan Gough (Patch My PC)]

We also need to get VLC updated to satisfy our security audits.

Is there a reason why setting the MSI installer to uninstall for all devices, and then setting the exe to install for all devices wouldn't work?

It would be better to use supersedence or an uninstallation pre-script here, in case the EXE installs first, then the MSI gets removed after, as that could result in a broken installation.

Also, we have now added a script to our GitHub to remove the MSI version. This can be added as a pre-install script to the Patch My PC package for the EXE variant:

https://github.com/PatchMyPCTeam/Community-Scripts/tree/main/Uninstall/Pre-Uninstall/Uninstall%20VLC%20Media%20Player%20MSI

[Donatello76]

Thanks Dan, the script looks great. We'll be testing it shortly.

Can I confirm that needs to be run as a pre-script for the exe installer? The readme/documentation on the github page says it should be done with msi, which I expect is an error.

I'll report back how we go with it.

[Dan Gough (Patch My PC)]

Yes that's right - sorry about the confusion, we'll get that corrected.

It does state:

"The script is intended to be used a pre-script for the latest EXE variant of VLC Media Player. It will silently uninstall the MSI variant of VLC Media Player."

But then confuses matters by talking about applying it to the MSI.