Linux · Ubuntu · Package update · September 23, 2019

imagemagick 8:6.9.7.4+dfsg-16ubuntu6.8: imagemagick 8:6.9.7.4+dfsg-16ubuntu6.8 for Ubuntu 18.04.6 LTS (bionic)

imagemagick 8:6.9.7.4+dfsg-16ubuntu6.8, released September 23, 2019, fixes 30 CVEs in imagemagick. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
30
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0435
91st percentile

Priority of the 30 CVEs

Patch now 0 Urgent 0 High 0 Routine 30

Fixed package versions

ProductReleaseFixed in
imagemagickUbuntu 18.04.6 LTS (bionic)8:6.9.7.4+dfsg-16ubuntu6.8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2019-13454 imagemagick-6-common: ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.n/a 0.0435 None reported
Routine CVE-2019-15140 imagemagick: coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause adenial of service (use-after-free and appl...n/a 0.0410 None reported
Routine CVE-2019-15139 imagemagick: The XWD image (X Window System window dumping file) parsing component inImageMagick 7.0.8-41 Q16 allows attackers to...n/a 0.0350 None reported
Routine CVE-2019-13135 imagemagick: ImageMagick before 7.0.8-50 has a "use of uninitialized value"vulnerability in the function ReadCUTImage in coders/cu...n/a 0.0328 None reported
Routine CVE-2019-13300 imagemagick: ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow atMagickCore/statistic.c in EvaluateImages because of misha...n/a 0.0317 None reported
Routine CVE-2019-13295 imagemagick: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read atMagickCore/threshold.c in AdaptiveThresholdImage because...n/a 0.0313 None reported
Routine CVE-2019-13297 imagemagick: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read atMagickCore/threshold.c in AdaptiveThresholdImage because...n/a 0.0313 None reported
Routine CVE-2019-13391 libmagickcore-6.q16hdri-7-extra: In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has aheap-based buffer over-read because of incorr...n/a 0.0282 None reported
Routine CVE-2019-16709 imagemagick: ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.n/a 0.0282 None reported
Routine CVE-2019-13311 imagemagick: ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because ofa wand/mogrify.c error.n/a 0.0278 None reported
Routine CVE-2019-13308 libmagickcore-6-headers: ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.n/a 0.0273 None reported
Routine CVE-2019-13301 libimage-magick-q16-perl: ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.n/a 0.0270 None reported
Routine CVE-2019-13309 imagemagick: ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because ofmishandling the NoSuchImage error in CLILi...n/a 0.0270 None reported
Routine CVE-2019-14981 libmagickcore-6.q16-7-extra: In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is adivide-by-zero vulnerability in the MeanShiftI...n/a 0.0268 None reported
Routine CVE-2019-16708 perlmagick: ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.n/a 0.0249 None reported
Routine CVE-2019-16710 imagemagick: ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated byAcquireMagickMemory in MagickCore/memory.c.n/a 0.0249 None reported
Routine CVE-2019-16711 libmagickcore-6-headers: ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.n/a 0.0249 None reported
Routine CVE-2019-16713 imagemagick-6.q16: ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.n/a 0.0249 None reported
Routine CVE-2019-12976 imagemagick-6-common: ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function incoders/pcl.c.n/a 0.0238 None reported
Routine CVE-2019-12979 imagemagick: ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability inthe SyncImageSettings function in MagickCore/...n/a 0.0236 None reported
Routine CVE-2019-12974 imagemagick: A NULL pointer dereference in the function ReadPANGOImage in coders/pango.cand the function ReadVIDImage in coders/vi...n/a 0.0230 None reported
Routine CVE-2019-12975 libmagickcore-6.q16-3: ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.n/a 0.0226 None reported
Routine CVE-2019-13310 libmagick++-6.q16hdri-9t64: ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because ofan error in MagickWand/mogrify.c.n/a 0.0218 None reported
Routine CVE-2019-13304 imagemagick: ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced as...n/a 0.0208 None reported
Routine CVE-2019-13305 imagemagick: ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.cin WritePNMImage because of a misplaced str...n/a 0.0208 None reported
Showing 1 to 25 of 30 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.