Gentoo Linux Security Advisory GLSA 200504-17 – Greg Roelofs has reported multiple input validation errors in XV image decoders. Tavis Ormandy of the Gentoo Linux Security Audit Team has reported insufficient validation in the PDS (Planetary Data System) image decoder, format string vulnerabilities in the TIFF and PDS decoders, and insufficient protection from shell meta-characters in malformed filenames. Versions less than 3.10a-r11 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37780/glsa-200504-17.txt
Source: https://packetstormsecurity.com/files/37780/Gentoo-Linux-Security-Advisory-200504-17.html