Details:
http://www.videolan.org/vlc/
This is a bugfix release. VLC media player 0.8.6d and earlier versions suffer from security vulnerabilities in the Web interface, Subtitle demuxer, Real RTSP demuxer, SDL_image library and MP4 demuxer.
Technical details are available in our advisories: SA-0801 and SA-0802.
The usual collection of assorted changes and improvements can be found here.
This release fully supports Mac OS X 10.3.9 once again.
We strongly recommend all users to update to this new version.
http://www.videolan.org/vlc/