Gentoo Linux Security Advisory GLSA 200510-26 – When XLI or Xloadimage process an image, they create a new image object to contain the new image, copying the title from the old image to the newly created image. Ariel Berkman reported that the ‘zoom’, ‘reduce’, and ‘rotate’ functions use a fixed length buffer to contain the new title, which could be overwritten by the NIFF or XPM image processors. Versions less than 1.17.0-r2 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41080/glsa-200510-26.txt
Source: https://packetstormsecurity.com/files/41080/Gentoo-Linux-Security-Advisory-200510-26.html