libheif 1.4.0 has a use-after-free in heif::HeifContext::Image:: setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images (CVE-2019-11471).
Also, imagemagick has been updated to 7.0.8.62 to fix various bugs.