You're missing a couple steps in your timeline, specifically that the bug was fixed before Secunia's public disclosure, then Secunia ignored said fix, then claimed it wasn't fixed but provided no proof, then ignored VLC for months while claiming them to be uncooperative. Only then do they stir up this drama in a final attempt to get Secunia to either back up their claims or acknowledge their mistakes.

Thus far Secunia has done neither.