Mailing the story:
Updated VLC fixes security problems
Users of VideoLAN's VLC cross-platform media player are strongly advised to upgrade to the just-released version 0.8.6c, which fixes "a security vulnerability in the CDDA, Vorbis, Theora and SAP plugins."