Errata overview
Errata ID 650
Date 2020-07-08
Source package imagemagick
Fixed in version 8:6.9.7.4+dfsg-11+deb9u8
Description
This update addresses the following issues:
* heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages
  because of mishandling columns (CVE-2019-13300)
* stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a
  misplaced assignment (CVE-2019-13304)
* stack-based buffer overflow at coders/pnm.c in WritePNMImage because of
  off-by-one errors (CVE-2019-13306)
* heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages
  because of mishandling rows (CVE-2019-13307)
* Use after free in ReadMATImage in coders/mat.c (CVE-2019-15140)
* heap-based buffer overflow in WriteSGIImage in coders/sgi.c
  (CVE-2019-19948)
Additional notes
CVE ID CVE-2019-13300
CVE-2019-13304
CVE-2019-13306
CVE-2019-13307
CVE-2019-15140
CVE-2019-19948
UCS Bug number #51616