Red Hat Security Advisory

RHSA-2026:35866

ruby:2.5 security update

Released 2026-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) ruby-2.5.9-109.module+el8.4.0+24479+aaeed2c5.i686::ruby:2.5, ruby-2.5.9-109.module+el8.4.0+24479+aaeed2c5.src::ruby:2.5, ruby-2.5.9-109.module+el8.4.0+24479+aaeed2c5.x86_64::ruby:2.5 +44
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) ruby-2.5.9-109.module+el8.4.0+24479+aaeed2c5.i686::ruby:2.5, ruby-2.5.9-109.module+el8.4.0+24479+aaeed2c5.src::ruby:2.5, ruby-2.5.9-109.module+el8.4.0+24479+aaeed2c5.x86_64::ruby:2.5 +44

TI-2026-30563 CVE-2026-42246 · GHSA-vcgp-9326-pqcp

LOW 35

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00312 Published 2026-05-09 Partial fix · 0.3.10, 0.4.24 +2 CWE-392

TI-2026-30574 CVE-2026-42258 · GHSA-75xq-5h9v-w6px

LOW 27

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00783 Published 2026-05-09 Partial fix · 0.4.24, 0.5.14 +1 CWE-77