CVE-2017-13134 · cross-distro fix matrix

CVE-2017-13134: In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2017-13134 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

graphicsmagick→ fixed in1.3.26-19urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y graphicsmagick
```
imagemagick→ fixed in8:6.9.9.34+dfsg-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y imagemagick
```

Source: Debian Security Tracker

graphicsmagick→ fixed in1.3.26-19urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y graphicsmagick
```
imagemagick→ fixed in8:6.9.9.34+dfsg-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y imagemagick
```

Source: Debian Security Tracker

graphicsmagick→ fixed in1.3.26-19urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y graphicsmagick
```
imagemagick→ fixed in8:6.9.9.34+dfsg-3urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y imagemagick
```