Debian Security Advisory DSA 1038-1 (xzgv)

The remote host is missing an update to xzgv announced via advisory DSA 1038-1. Andrea Barisani discovered that xzgv, a picture viewer for X with a thumbnail-based selector, attempts to decode JPEG images within the CMYK/YCCK colour space incorrectly, which could lead to the execution of arbitrar...