The version update was required to update mkvtoolnix (which needed a newer libmatroska version). The bug the mkvtoolnix update fixes was CVE-2018-4022 or boo#1113709. So I think rebuilding vlc-nox is needed(?).