xv -- filename handling format string vulnerability

A Gentoo Linux Security Advisory reports:

Tavis Ormandy of the Gentoo Linux Security Audit Team
identified a flaw in the handling of image filenames by xv.
Successful exploitation would require a victim to process
a specially crafted image with a malformed filename,
potentially resulting in the execution of arbitrary code.