cups -- multiple vulnerabilities

The release note of cups 1.3.9 reports:

It contains the following fixes:

SECURITY: The HP-GL/2 filter did not range check
pen numbers (STR #2911)
SECURITY: The SGI image file reader did not range
check 16-bit run lengths (STR #2918)
SECURITY: The text filter did not range check cpi,
lpi, or column values (STR #2919)

Exploitation of this vulnerability results in the execution
of arbitrary code with the privileges of the affected service.