Linux · Ubuntu · Package update · September 23, 2019

libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.7: libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.7 for Ubuntu 18.04.6 LTS (bionic)

libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.7, released September 23, 2019, fixes 26 CVEs in libimage-magick-perl. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
26
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0592
93rd percentile

Priority of the 26 CVEs

Patch now 0 Urgent 0 High 0 Routine 26

Fixed package versions

ProductReleaseFixed in
libimage-magick-perlUbuntu 18.04.6 LTS (bionic)8:6.9.7.4+dfsg-16ubuntu6.7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2019-9956 imagemagick: In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in thefunction PopHexPixel of coders/ps.c, which...n/a 0.0592 None reported
Routine CVE-2018-15607 imagemagick: In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36...n/a 0.0511 None reported
Routine CVE-2018-16412 imagemagick: ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.n/a 0.0442 None reported
Routine CVE-2018-16413 imagemagick: ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel functio...n/a 0.0417 None reported
Routine CVE-2019-10650 imagemagick: In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in thefunction WriteTIFFImage of coders/tiff.c, w...n/a 0.0413 None reported
Routine CVE-2019-11598 imagemagick: In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in thefunction WritePNMImage of coders/pnm.c, whi...n/a 0.0406 None reported
Routine CVE-2019-7397 imagemagick: In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, severalmemory leaks exist in WritePDFImage in coder...n/a 0.0380 None reported
Routine CVE-2019-7398 libimage-magick-q16hdri-perl: In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage incoders/dib.c.n/a 0.0372 None reported
Routine CVE-2019-11597 imagemagick: In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in thefunction WriteTIFFImage of coders/tiff.c, w...n/a 0.0371 None reported
Routine CVE-2019-11470 libmagick++-6.q16hdri-9t64: The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackersto cause a denial-of-service (uncontrolled r...n/a 0.0364 None reported
Routine CVE-2019-7395 libmagickcore-6.q16-3: In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.n/a 0.0350 None reported
Routine CVE-2019-7396 imagemagick: In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.n/a 0.0350 None reported
Routine CVE-2019-11472 libmagick++-6-headers: ReadXWDImage in coders/xwd.c in the XWD image parsing component ofImageMagick 7.0.8-41 Q16 allows attackers to cause...n/a 0.0341 None reported
Routine CVE-2018-20467 libmagickcore-6.q16-3-extra: In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU...n/a 0.0310 None reported
Routine CVE-2018-18024 libmagickcore-6-headers: In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c filen/a 0.0303 None reported
Routine CVE-2017-12805 libmagickwand-6.q16-3: In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attac...n/a 0.0294 None reported
Routine CVE-2017-12806 libmagickwand-6.q16hdri-3: In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attacker...n/a 0.0294 None reported
Routine CVE-2019-7175 perlmagick: In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.n/a 0.0294 None reported
Routine CVE-2019-16712 imagemagick: ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.n/a 0.0261 None reported
Routine CVE-2018-18025 imagemagick-common: In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, whi...n/a 0.0254 None reported
Routine CVE-2019-15141 imagemagick: WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allowsattackers to cause a denial-of-service (application...n/a 0.0218 None reported
Routine CVE-2018-18544 imagemagick-common: There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function Pr...n/a 0.0201 None reported
Routine CVE-2018-18016 imagemagick: ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.n/a 0.0179 None reported
Routine CVE-2018-17965 libmagickcore-6-arch-config: ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.n/a 0.0177 None reported
Routine CVE-2018-17966 libmagickcore-6.q16hdri-3: ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.n/a 0.0171 None reported
Showing 1 to 25 of 26 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.