Of what to whom? VLC fixed the vulnerability themselves, and upstreamed the fix themselves. They do complain that Secunia didn't inform or issue an advisory on

Of what to whom? VLC fixed the vulnerability themselves, and upstreamed the fix themselves. They do complain that Secunia didn't inform or issue an advisory on upstream projects - if VLC had not taken the initiative themselves to upstream the fix then all other apps would still be vulnerable.