TI-2026-34824 CVE-2026-47240 · GHSA-8p34-64r3-mwg8
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Priority LOW 28
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
RHSA-2026:50728
ruby:3.3 security, bug fix, and enhancement update
Released 2026-08-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) ruby-3.3.12-8.module+el8.10.0+24567+c4e5368e.aarch64::ruby:3.3, ruby-3.3.12-8.module+el8.10.0+24567+c4e5368e.i686::ruby:3.3, ruby-3.3.12-8.module+el8.10.0+24567+c4e5368e.ppc64le::ruby:3.3 +47
Fixes 6 records
TI-2026-30572 CVE-2026-42256 · GHSA-87pf-fpwv-p7m7
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Priority LOW 27
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-30573 CVE-2026-42257 · GHSA-hm49-wcqc-g2xg
net-imap: Command Injection via "raw" arguments to multiple commands
Priority LOW 26
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-34826 CVE-2026-47242 · GHSA-46q3-7gv7-qmgg
Net::IMAP: Command Injection via ID command argument
Priority LOW 25
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-34825 CVE-2026-47241 · GHSA-c4fp-cxrr-mj66
Net::IMAP: Denial of Service via incomplete raw argument validation
Priority LOW 17
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.
TI-2026-22172 CVE-2026-27820 · GHSA-g857-hhfv-j68w
zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption
Priority LOW 16
zlib is a Ruby interface for the zlib compression/decompression library.