Image magic Malware on 3.4

[Redchief]

"For the oldstable distribution (jessie), these problems have been fixed in version 8:6.8.9.9-5+deb8u10."

Looks like this distro install shows imagemagick ubuntu package list as version 8.6.8.9.9-7

Accordingly this version should be ok?
Also, previously did updates either the same day before or the same day event occurred not sure. Puzzling.

Thank you,

Fresh reinstall from DVD with updates. This package is pre-installed in synaptic. My guess may be off but believe this malware can leave code on hdd the stays there after reinstall. When first compromised had fresh updates also.

Hmm.
Thank you.

[quote author=trinidad link=topic=4464.msg33948#msg33948 date=1501426560]
https://www.debian.org/security/2017/dsa-3914

This is a modern (recently discovered hack) that was not possible on older versions of Deb. As systems evolve new features new ways to compromise them evolve as well. The best reason to run stable systems linked to the security update path. LL has a simple efficient update application. Don't disable it.

TC

[/quote]