From VideoLAN Wiki

Changes between 0.8.6e and 0.8.6f

Security updates

• Really fixed subtitle buffer overflow (CVE-2007-6681, VideoLAN-SA-0801)
• Fixed Real RTSP code execution problem (CVE-2008-0073, VideoLAN-SA-0803)
• Fixed MP4 integer overflows (CVE-2008-1489, CVE-2008-1768, VideoLAN-SA-0803)
• Fixed cinepak vulnerabilities (CVE-2008-1769, VideoLAN-SA-0803)

Various bugfixes

• The Mozilla plugin registers a usable range of MIME-types on Mac OS X
• Improved video output behavior on multi-screen setups running Mac OS X
• Fixed crashes in H264 packetizer
• Close MMS access on network timeout
• Fix some problems with AAC decoder & packetizer