Download VLC Media Player 0.8.6e

VideoLAN has released a new version of VLC Media Player. VLC Media Player is an open source cross-platform media player that can play various audio, video and streaming formats without having to install the relevant codec first. Version 0.8.6e fixes some security vulnerabilities found in the Web interface, Subtitle demuxer, Real RTSP demuxer, SDL_image library and MP4 demuxer. More information about this can be found in the security advisories SA-0801 and SA-0802 are being found. Also nice to report is that VLC Media Player can be used again on Mac OS X version 10.3.9. The full changelog for this release shows the following changes:

Various bug fixes:

• Resume playback for viewing content over FTP
• Fixed XShm detection with remote X11

security updates:

• Subtitle demuxers overflow (CVE-2007-6681)
• HTTP listener format string injection (CVE-2007-6682)
• Fixed buffer overflow in the SDL_image library (CVE-2006-4484)
• Real RTSP overflows (CVE-2008-0225, CVE-2008-0295, CVE-2008-0296, VideoLAN-SA-0801)
• Arbitrary memory overwrite in the MP4 demuxer (CORE-2008-0130, VideoLAN-SA-0802)

audio filters:

• Fixed DTS to S/PDIF converter

audio output:

• Fixed 5.1 audio on ALSA

Access:

• Fixed some RTSP hanging and user/password passing through RTSP URLs

streaming output:

• Fixed waiting for SPS/PPS problem in H.264 packetizer

Encoders:

• Improved compatibility for creating H.264 video files playable on iPhones
• Improved detection of optimal amount of threads for multi-threaded H.264 encoding on multi-cpu systems
  • Note that this is used when transcode threads is set to 0 (default)
  • Not supported on Windows (multiple threads require manual configuration)

Mac OS X Interface & Port:

• Restored compatibility with Mac OS X 10.3.9
• Corrected behavior of the Preferences panel
• VLC no longer crashes on quit while playing

Localisation:

• Updated Romanian and Polish translations

[break]