This security update addresses three vulnerabilities in the Ruby `net-imap` library: a Denial of Service via crafted IMAP responses (CVE-2026-42245, CVSS 7.5 HIGH), an IMAP Command Injection via Symbol Arguments (CVE-2026-42258, CVSS 5.3 MEDIUM), and an information disclosure via a man-in-the-middle attack bypassing TLS (CVE-2026-42246, CVSS 7.4 HIGH). Affected versions are `net-imap` < 0.3.10, >= 0.4.0 < 0.4.24, >= 0.5.0 < 0.5.14, and >= 0.6.0 < 0.6.4. The fixed versions are 0.3.10, 0.4.24, 0.5.14, and 0.6.4, respectively.
Red Hat Product Errata RHSA-2026:33515 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33515 - Security Advisory Overview Updated Packages Synopsis Important: ruby:3.3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2468495 - CVE-2026-42245 ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses BZ - 2468498 - CVE-2026-42258 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments BZ - 2468499 - CVE-2026-42246 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS CVEs CVE-2026-42245 CVE-2026-42246 CVE-2026-42258 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM ruby-3.3.10-7.module+el8.10.0+24407+4a33a056.src.rpm SHA-256: b3aafb9d313179caeaa9028422f3f93897b539d2556facd9a90b65d439eebd99 rubygem-abrt-0.4.0-1.module+el8.10.0+21226+b78a28c4.src.rpm SHA-256: 6c76785b37bd67c208e03194d04a7786884a1b47bea57029048c0e212a281ad4 rubygem-mysql2-0.5.5-1.module+el8.10.0+21226+b78a28c4.src.rpm SHA-256: 9b3a645a27ce9d8f785d641400ce5aaab511643c372b17a93e72ea1207a811ba rubygem-pg-1.5.4-1.module+el8.10.0+21226+b78a28c4.src.rpm SHA-256: 2aa307203369a43d0a377e58ef04a68e7a83f8e6d4de8717094a081b863df142 x86_64 ruby-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 01842ed5c900006a613962d284f1551e53a3178bdffd8f75d2c77e74623f33a4 ruby-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 4c273c7b2410f73966115cd6b918a42a3c7d89e46e6bcfdde4a6a3b8b1d9d461 ruby-bundled-gems-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 042704fd75598afa70d51acd267863cfb35177f550a3aa61e4dd794741605d49 ruby-bundled-gems-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 4796745b75b8414c5d208d916e16643cacfe15ed1244e20591afb2783fa9d5ce ruby-bundled-gems-debuginfo-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 01ff8ea50948b53597fe65b2bd1469d6764ee5b973077dbd0cc59f965ccd86d7 ruby-bundled-gems-debuginfo-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 9327519f6529686aa53450171e7236a4f583d6ba9115303f978a76ed0b72796f ruby-debuginfo-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: c96fee530a2ff9e5441e01a309b6aaae27af134a99e132299e35bc4836a46d60 ruby-debuginfo-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: d508c907a09cc2e3ec51b64a9499b912bcc93c567dd79b13eb385f870925ffa8 ruby-debugsource-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: b43a3565efd1ded8ee1d310e9b483f55cb6a93796943f096b5d21002c3e7bdac ruby-debugsource-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: e9632d4c98f302c3c8200d808ca37cf99ff55cbdbcb0ef1c34d401be43194d55 ruby-default-gems-3.3.10-7.module+el8.10.0+24407+4a33a056.noarch.rpm SHA-256: a798ed3598f5061ee86dc51e6a3841499b3d06fea363ce5e558a70ae3514ed7f ruby-devel-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 327026374cb35cf19fa7bbd4e63231ecc0b39925960857a62d4b374cbe2aae22 ruby-devel-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 66529813f28a201baa2af9992caa544e3dd64803a31820708c2adc04aa7da91c ruby-doc-3.3.10-7.module+el8.10.0+24407+4a33a056.noarch.rpm SHA-256: e38ec0e3d3d7f0171f2c2a3e4b3e89ae265f4df1003a77c6418d22325cebd2cb ruby-libs-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 52625b898396ef8693d6748698fb21671e7938f7e61328929b631c9a0bdb3c81 ruby-libs-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 32e4f7ce2bd9902e3bca8e4b5e2ef993c368ec2affcde09614f7e80c6bf371f1 ruby-libs-debuginfo-3.3.10-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: f1fdabf8de53d14e8e26e4c38aa099f4dae752655e1e96932f526d08d146d390 ruby-libs-debuginfo-3.3.10-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 3b6402ce6e05e93693ac54218411d9136b0e0661706ac1b9cc7c8cb47ff0d7fa rubygem-abrt-0.4.0-1.module+el8.10.0+21226+b78a28c4.noarch.rpm SHA-256: 972556b856aa7a3ee99668e40c4b58dbd4b72ebb6c0438515719db7df05aa31f rubygem-abrt-doc-0.4.0-1.module+el8.10.0+21226+b78a28c4.noarch.rpm SHA-256: 7d0597b9158e612deaba5ddb401e4748dae8e53523ed711a772a614e0fb863d3 rubygem-bigdecimal-3.1.5-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: a7d2ef63877f8c742762e4ec59706b809a3354e0823e0fb194d3eb85ce475822 rubygem-bigdecimal-3.1.5-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: ce57147b824109ca5ac20c519af2a4ffd4c3d0ce1456f9474a46472528c2a3ed rubygem-bigdecimal-debuginfo-3.1.5-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 2a83ef19fd887dea7b004354438a3884d8dca2e9cd04d22f2d7e9907ee32841f rubygem-bigdecimal-debuginfo-3.1.5-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 3a1a5ba3b5226e976d755ad5f68cdea9446dad2c08fea82acabac42e23316dd0 rubygem-bundler-2.5.22-7.module+el8.10.0+24407+4a33a056.noarch.rpm SHA-256: 3003ef847e08d03ae779d7e8748132b36c9e7facf13b1073aac5f5cce87a7b15 rubygem-io-console-0.7.1-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 729da219b294817757c9e8fb9e450d167ccc9f321d4863ae4f7964b77620ce4a rubygem-io-console-0.7.1-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 429d301f08692667a21ccd5da5a4277c447d77a4fd7642c369e388fa84957925 rubygem-io-console-debuginfo-0.7.1-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 10df81b87a33fcd27a58626b87aad6dd566f1bd5c2acd6f48383b4188951bb84 rubygem-io-console-debuginfo-0.7.1-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 04d2f26fbffa486145663f6ad63864ff8cf5c8c2b27c97b62d23b1217d510f78 rubygem-irb-1.13.1-7.module+el8.10.0+24407+4a33a056.noarch.rpm SHA-256: 1369cecbb88f6ad0f33400307e29494d41a19e1650bab397adc601f39c2f97d7 rubygem-json-2.7.2-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: e06ee3c09c7ef032b44c6fb8c90409900a6ec4dafa07308f5cad0331d231c532 rubygem-json-2.7.2-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 29bcbc37b1907f672ea9f4bc39752024496d25883e103d1d140a150c43f77ac0 rubygem-json-debuginfo-2.7.2-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: afd49102ecc428cb1efa6a20b3dbdd2a6168ed9f9ca499fb5d5abacd3b81c45b rubygem-json-debuginfo-2.7.2-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: c64e7fb70a34f5775304a515ff37c9ce3b0f2808899898d15df9bba883902d76 rubygem-minitest-5.20.0-7.module+el8.10.0+24407+4a33a056.noarch.rpm SHA-256: 2224f6871d62a5addad6b9bf2dfd50d2cd945ff3f40331cf09d791254d04c5b8 rubygem-mysql2-0.5.5-1.module+el8.10.0+21226+b78a28c4.x86_64.rpm SHA-256: 23165923ee43dae93d17b6f2066f1a5d101badcf7ac85270c2938235349aafe9 rubygem-mysql2-debuginfo-0.5.5-1.module+el8.10.0+21226+b78a28c4.x86_64.rpm SHA-256: 36b5e1ac05c8f5eca4453fe3301b28b1a754b087192a1f523332039cde83ff7d rubygem-mysql2-debugsource-0.5.5-1.module+el8.10.0+21226+b78a28c4.x86_64.rpm SHA-256: 8be2adbc3396bd9c1f83aa0d3e89b9c3f3400f616dac912b436cb842a8e4ea06 rubygem-mysql2-doc-0.5.5-1.module+el8.10.0+21226+b78a28c4.noarch.rpm SHA-256: 7a5d72cf451bc09a9aef48c4873aa125ac9de75ab228bc07cd802113ba3a0f9c rubygem-pg-1.5.4-1.module+el8.10.0+21226+b78a28c4.x86_64.rpm SHA-256: 7dc6fbdc06c3c8d76bb54b0adee3565d0e2caa949a7621f6e20c8d60c250d25d rubygem-pg-debuginfo-1.5.4-1.module+el8.10.0+21226+b78a28c4.x86_64.rpm SHA-256: 46780eec284f26910bceb0112e6297d966439a3013e45aa9c22eea4215a27382 rubygem-pg-debugsource-1.5.4-1.module+el8.10.0+21226+b78a28c4.x86_64.rpm SHA-256: 19b7832e93ae92eddc7840ca8ed10339ccdefc0a7b4fadc854da38375e221a8b rubygem-pg-doc-1.5.4-1.module+el8.10.0+21226+b78a28c4.noarch.rpm SHA-256: 9df1b766e01e7238813a2a0012b6715174e91c1ac47e52c26d3fea23adb99ea4 rubygem-power_assert-2.0.3-7.module+el8.10.0+24407+4a33a056.noarch.rpm SHA-256: fe3e1018b434dfb373b4163e9dc34f8cbf687ac43c7bc962a07ddb2027753d41 rubygem-psych-5.1.2-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: 4593a537aa887db84a48c8bd64e31e5d83ee955f5b79e0f39823fd290f99ffe3 rubygem-psych-5.1.2-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 98f1ad28bcaca8486cd70d9934713c80149d63b9ba4e155c15337eeae6f51b84 rubygem-psych-debuginfo-5.1.2-7.module+el8.10.0+24407+4a33a056.i686.rpm SHA-256: fdf373f4926d7e6a2253b94cf21855dd9bec784315d76a725769311cb48381f9 rubygem-psych-debuginfo-5.1.2-7.module+el8.10.0+24407+4a33a056.x86_64.rpm SHA-256: 5b236fc445e38aa574d014ee4891305df1ba7b07bc86fd32