Errata overview
Errata ID 277
Date 2018-10-17
Source package imagemagick
Fixed in version 8:6.9.7.4+dfsg-11+deb9u6
Description
This update addresses the following issues:
* heap-based buffer over-read in the ParseImageResourceBlocks function in
  coders/psd.c (CVE-2018-16412)
* heap-based buffer over-read in the PushShortPixel function in
  MagickCore/quantum-private.h (CVE-2018-16413)
* out-of-bounds write in InsertRow function in coders/cut.c (CVE-2018-16642)
* improper check for length in ReadDCMImage of coders/dcm.c and ReadPICTImage
  of coders/pict.c (CVE-2018-16644)
* Out-of-memory ReadBMPImage of coders/bmp.c and ReadDIBImage of codes/dib.c
  (CVE-2018-16645)
Additional notes
CVE ID CVE-2018-16412
CVE-2018-16413
CVE-2018-16642
CVE-2018-16644
CVE-2018-16645
UCS Bug number #47990