Summary
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.
Security Fix(es):
* zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader (CVE-2026-27820)
* net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input (CVE-2026-42257)
* ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication (CVE-2026-42256)
* net-imap: Net::IMAP: Command injection via non-synchronizing literals (CVE-2026-47240)
* net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)
* net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input (CVE-2026-47241)
Bug Fix(es) and Enhancement(s):
* ruby:3.3/ruby: Rebase to the latest Ruby 3.3 release [rhel-8] (JIRA:Rocky Linux-170929)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | ruby | 0:3.3.12-8.module+el8.10.0+40269+dc93e2d1 |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1679+61871737 |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.5.0+668+665814fa |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.9.0+1537+0b2034bd |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1827+16ecb9d2 |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1820+f3fffb92 |
| Rocky Linux · 8 | rubygem-abrt | 0:0.4.0-1.module+el8.10.0+1826+b62220b4 |
| Rocky Linux · 8 | rubygem-mysql2 | 0:0.5.5-1.module+el8.10.0+1679+61871737 |
| Rocky Linux · 8 | rubygem-mysql2 | 0:0.5.5-1.module+el8.10.0+1827+16ecb9d2 |
| Rocky Linux · 8 | rubygem-pg | 0:1.5.4-1.module+el8.10.0+1679+61871737 |
| Rocky Linux · 8 | rubygem-pg | 0:1.5.4-1.module+el8.10.0+1827+16ecb9d2 |
Vulnerabilities 6
-
Medium 6.0
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, when authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile ser…
-
Medium 5.8
net-imap: Command Injection via "raw" arguments to multiple commands
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this …
-
Medium 5.8
Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a se…
-
Medium 5.8
Net::IMAP: Command Injection via ID command argument
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they w…
-
Low 2.1
Net::IMAP: Denial of Service via incomplete raw argument validation
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent verbatim. If this str…
-
Low 1.7
zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption
zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2459002
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2468494
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2468500
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2491519
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2491522
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2491523
-
advisory
https://access.redhat.com/errata/RHSA-2026:50728