@distrotube
Looking forward to trying Endeavour.

In terms of VLC from what the devs have said, the problem is actually in a library that was patched over a year ago. There was never a CVE assigned so the likes of Debian 9 and Ubuntu 18.04 never updated as they didn't know it was necessary for a security issue.