The xine-lib package for Ubuntu has been revamped to resolve a serious integer overflow vulnerability that could potentially enable remote code execution or system crashes.
It was discovered that the 4xm demuxer in xine-lib did not correctly handle a large current_track value in a 4xm file, resulting in an integer overflow