USN-6960-1: RMagick vulnerability
14 August 2024
RMagick could be made to crash if it received specially crafted input.
Releases
Packages
- ruby-rmagick - Ruby Bindings for ImageMagick
Details
Nick Browning discovered that RMagick incorrectly handled memory under
certain operations. An attacker could possibly use this issue to cause
a denial of service through memory exhaustion.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
-
ruby-rmagick
-
4.2.3-2ubuntu0.22.04.1~esm2
Available with Ubuntu Pro
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.