xine is a free multimedia player. It plays back CDs, DVDs, and VCDs. It also decodes multimedia files like AVI, MOV, WMV, and MP3 from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available--and some of the most uncommon formats, too. All those features come in a reusable library (xine-lib) which can easily be embedded in your applications. License: GNU General Public License (GPL) Changes:
A buffer overflow in the NSF demuxer, possibly allowing remote attackers to cause a denial of service (crash) or execute arbitrary code, was fixed. This vulnerability was reported as CVE-2008-1878. More usage of calloc() was deployed to provide extra safety against possible integer overflows as found in CVE-2008-1482. The JACK output plugin was improved. The display of some MJPEG streams (YUVJ420P) was fixed.

More...