CVE-2023-5349
Fixed in a distro release EPSS <1%CVSS 5.3
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion.
Products: Red Hat 3scale API Management Platform 2, Fedora, rmagick, fedoraproject fedora
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | rmagick | 5.3.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | ruby-rmagick | 2.16.0-6+deb10u1 |
| Debian 11 | ruby-rmagick | 2.16.0-7+deb11u1 |
| Debian 12 | ruby-rmagick | no fix |
| Debian 13 | ruby-rmagick | 5.3.0-1 |
| Debian 14 | ruby-rmagick | 5.3.0-1 |
| Ubuntu 20.04 LTS | ruby-rmagick | 2.16.0-6ubuntu0.1 |
| Ubuntu Pro 22.04 LTS | ruby-rmagick | 4.2.3-2ubuntu0.22.04.1~esm2 |