Gentoo Linux Security Advisory GLSA 200503-09 – Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the handling of image filenames by xv. Versions less than 3.10a-r10 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36471/glsa-200503-09.txt
Source: https://packetstormsecurity.com/files/36471/Gentoo-Linux-Security-Advisory-200503-9.html