xloadimage - missing input sanitising, integer overflow

Several vulnerabilities have been discovered in xloadimage, an image
viewer for X11. The Common Vulnerabilities and Exposures project
identifies the following problems:

• CAN-2005-0638
  Tavis Ormandy of the Gentoo Linux Security Audit Team has reported
  a flaw in the handling of compressed images, where shell
  meta-characters are not adequately escaped.

• CAN-2005-0639
  Insufficient validation of image properties have been
  discovered which could potentially result in buffer management
  errors.

For the stable distribution (woody) these problems have been fixed in
version 4.1-10woody1.

For the unstable distribution (sid) these problems have been fixed in
version 4.1-14.2.

We recommend that you upgrade your xloadimage package.