Description
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in `net-imap`'s response parser. At any time while the client is connected, a malicious server can send can send highly compressed `uid-set` data which is automatically read by the client's receiver thread. The response parser uses `Range#to_a` to convert the `uid-set` data into arrays of integers, with no limitation on the expanded size of the ranges. Versions 0.3.8, 0.4.19, 0.5.6, and higher fix this issue. Additional details for proper configuration of fixed versions and backward compatibility are available in the GitHub Security Advisory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ruby | net-imap | >= 0.3.2, < 0.3.8, >= 0.4.0, < 0.4.19, >= 0.5.0, < 0.5.6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ruby3.3 | 3.3.8-1 | — |
| Debian 13 | ruby3.3 | 3.3.8-1 | — |
| Debian 12 | ruby3.1 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | ruby3.2 | 3.2.3-1ubuntu0.24.04.5 | USN-7418-1 |
| Ubuntu 22.04 LTS | ruby3.0 | 3.0.2-7ubuntu2.10 | USN-7418-1 |
| Ubuntu 20.04 LTS | ruby2.7 | 2.7.0-5ubuntu1.18 | USN-7418-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | ruby +5 | 3.3.8-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-bigdecimal | 3.1.5-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-bundler | 2.5.22-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-io-console | 0.7.1-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-irb | 1.13.1-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-json | 2.7.2-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-minitest | 5.20.0-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-power_assert | 2.0.3-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-psych | 5.1.2-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-racc | 1.7.3-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-rake | 13.1.0-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-rbs | 3.4.0-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-rdoc | 6.6.3.1-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-rexml | 3.3.9-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-rss | 0.3.1-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-test-unit | 3.6.1-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygem-typeprof | 0.21.9-10.el10_0 | RHSA-2025:8131 |
| RHEL 10 | rubygems +1 | 3.5.22-10.el10_0 | RHSA-2025:8131 |
| RHEL 9 | ruby +5 | 3.3.8-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-bigdecimal | 3.1.5-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-bundler | 2.5.22-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-io-console | 0.7.1-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-irb | 1.13.1-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-json | 2.7.2-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-minitest | 5.20.0-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-mysql2 +1 | 0.5.5-1.module+el9.4.0+21222+faeeed2f | RHSA-2025:4493 |
| RHEL 9 | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+21222+faeeed2f | RHSA-2025:4493 |
| RHEL 9 | rubygem-power_assert | 2.0.3-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-psych | 5.1.2-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-racc | 1.7.3-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-rake | 13.1.0-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-rbs | 3.4.0-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-rdoc | 6.6.3.1-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-rexml | 3.3.9-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-rss | 0.3.1-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-test-unit | 3.6.1-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygem-typeprof | 0.21.9-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 9 | rubygems +1 | 3.5.22-4.module+el9.5.0+23030+26c9b8e1 | RHSA-2025:4493 |
| RHEL 8 | ruby +5 | 3.3.8-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-abrt +1 | 0.4.0-1.module+el8.10.0+21226+b78a28c4 | RHSA-2025:10217 |
| RHEL 8 | rubygem-bigdecimal | 3.1.5-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-bundler | 2.5.22-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-io-console | 0.7.1-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-irb | 1.13.1-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-json | 2.7.2-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-minitest | 5.20.0-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-mysql2 +1 | 0.5.5-1.module+el8.10.0+21226+b78a28c4 | RHSA-2025:10217 |
| RHEL 8 | rubygem-pg +1 | 1.5.4-1.module+el8.10.0+21226+b78a28c4 | RHSA-2025:10217 |
| RHEL 8 | rubygem-power_assert | 2.0.3-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-psych | 5.1.2-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-racc | 1.7.3-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-rake | 13.1.0-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-rbs | 3.4.0-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-rdoc | 6.6.3.1-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-rexml | 3.3.9-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-rss | 0.3.1-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-test-unit | 3.6.1-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygem-typeprof | 0.21.9-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
| RHEL 8 | rubygems +1 | 3.5.22-4.module+el8.10.0+23024+a87ba659 | RHSA-2025:10217 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | ruby-doc +1 | 3.3.8-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-bundler | 2.5.22-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-irb | 1.13.1-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-minitest | 5.20.0-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-power_assert | 2.0.3-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-rake | 13.1.0-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-rdoc | 6.6.3.1-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-rexml | 3.3.9-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-rss | 0.3.1-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-test-unit | 3.6.1-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygem-typeprof | 0.21.9-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 10 | rubygems +1 | 3.5.22-10.el10_0 | ALSA-2025:8131 |
| AlmaLinux 8 | ruby +5 | 3.3.8-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-abrt +1 | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-bigdecimal | 3.1.5-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-bundler | 2.5.22-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-io-console | 0.7.1-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-irb | 1.13.1-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-json | 2.7.2-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-minitest | 5.20.0-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-mysql2 +1 | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-pg +1 | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-power_assert | 2.0.3-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-psych | 5.1.2-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-racc | 1.7.3-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-rake | 13.1.0-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-rbs | 3.4.0-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-rdoc | 6.6.3.1-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-rexml | 3.3.9-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-rss | 0.3.1-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-test-unit | 3.6.1-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygem-typeprof | 0.21.9-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
| AlmaLinux 8 | rubygems +1 | 3.5.22-4.module_el8.10.0+4022+8b66723c | ALSA-2025:10217 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | ruby | 3.3.8-10.el10_0 | RLSA-2025:8131 |
| Rocky Linux 9 | ruby | 3.3.8-4.module+el9.6.0+31867+3a5bf654 | RLSA-2025:4493 |
| Rocky Linux 9 | rubygem-mysql2 | 0.5.5-1.module+el9.6.0+31867+3a5bf654 | RLSA-2025:4493 |
| Rocky Linux 9 | rubygem-pg | 1.5.4-1.module+el9.6.0+31867+3a5bf654 | RLSA-2025:4493 |
| Rocky Linux 8 | ruby | 3.3.8-4.module+el8.10.0+2004+fd6e8d72 | RLSA-2025:10217 |
| Rocky Linux 8 | rubygem-abrt | 0.4.0-1.module+el8.5.0+668+665814fa | RLSA-2025:10217 |
| Rocky Linux 8 | rubygem-mysql2 | 0.5.5-1.module+el8.10.0+1679+61871737 | RLSA-2025:10217 |
| Rocky Linux 8 | rubygem-pg | 1.5.4-1.module+el8.10.0+1679+61871737 | RLSA-2025:10217 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ruby3.2 +5 | 3.2.7-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-bigdecimal | 3.1.3-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-bundler | 2.4.19-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-io-console | 0.6.0-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-irb | 1.6.2-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-json | 2.6.3-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-minitest | 5.25.1-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-power_assert | 2.0.3-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-psych | 5.0.1-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-rake | 13.0.6-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-rbs | 2.8.2-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-rdoc | 6.5.1.1-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-rexml | 3.3.9-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-rss | 0.3.1-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-test-unit | 3.5.7-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygem-typeprof | 0.21.3-183.amzn2023.0.4 | ALAS2023-2025-929 |
| Amazon Linux 2023 | ruby3.2-rubygems +1 | 3.4.19-183.amzn2023.0.4 | ALAS2023-2025-929 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | ruby | 3.3.5-3 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | ruby +5 | 3.3.8-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-bigdecimal | 3.1.5-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-bundler | 2.5.22-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-io-console | 0.7.1-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-irb | 1.13.1-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-json | 2.7.2-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-minitest | 5.20.0-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-power_assert | 2.0.3-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-psych | 5.1.2-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-racc | 1.7.3-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-rake | 13.1.0-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-rbs | 3.4.0-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-rdoc | 6.6.3.1-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-rexml | 3.3.9-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-rss | 0.3.1-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-test-unit | 3.6.1-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygem-typeprof | 0.21.9-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 10 | rubygems +1 | 3.5.22-10.el10_0 | ELSA-2025-8131 |
| Oracle Linux 9 | ruby +5 | 3.3.8-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-bigdecimal | 3.1.5-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-bundler | 2.5.22-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-io-console | 0.7.1-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-irb | 1.13.1-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-json | 2.7.2-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-minitest | 5.20.0-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-mysql2 +1 | 0.5.5-1.module+el9.4.0+90257+8524dee7 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-pg +1 | 1.5.4-1.module+el9.4.0+90257+8524dee7 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-power_assert | 2.0.3-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-psych | 5.1.2-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-racc | 1.7.3-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-rake | 13.1.0-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-rbs | 3.4.0-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-rdoc | 6.6.3.1-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-rexml | 3.3.9-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-rss | 0.3.1-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-test-unit | 3.6.1-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygem-typeprof | 0.21.9-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 9 | rubygems +1 | 3.5.22-4.module+el9.5.0+90562+4bc8f111 | ELSA-2025-4493 |
| Oracle Linux 8 | ruby +5 | 3.3.8-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-abrt +1 | 0.4.0-1.module+el8.10.0+90287+d51aa4ed | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-bigdecimal | 3.1.5-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-bundler | 2.5.22-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-io-console | 0.7.1-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-irb | 1.13.1-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-json | 2.7.2-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-minitest | 5.20.0-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-mysql2 +1 | 0.5.5-1.module+el8.10.0+90287+d51aa4ed | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-pg +1 | 1.5.4-1.module+el8.10.0+90287+d51aa4ed | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-power_assert | 2.0.3-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-psych | 5.1.2-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-racc | 1.7.3-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-rake | 13.1.0-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-rbs | 3.4.0-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-rdoc | 6.6.3.1-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-rexml | 3.3.9-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-rss | 0.3.1-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-test-unit | 3.6.1-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygem-typeprof | 0.21.9-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
| Oracle Linux 8 | rubygems +1 | 3.5.22-4.module+el8.10.0+90625+b4030d02 | ELSA-2025-10217 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r23 | — |
| Wolfi rolling | logstash-8-with-output-opensearch | 8.17.2-r1 | — |
| Wolfi rolling | ruby3.2-net-imap +2 | 0.5.6-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | net-imap | >= 0.3.2, < 0.3.8 | 0.3.8 | GHSA-7fc5-f82f-cx69 |
| RubyGems | net-imap | >= 0.4.0, < 0.4.19 | 0.4.19 | GHSA-7fc5-f82f-cx69 |
| RubyGems | net-imap | >= 0.5.0, < 0.5.6 | 0.5.6 | GHSA-7fc5-f82f-cx69 |
Advisories 13
- ALSA-2025:8131 Moderate: ruby security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:10217 Moderate: ruby:3.3 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:8131 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Sep 17, 2026
- RHSA-2025:4493 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Sep 17, 2026
- RHSA-2025:10217 Red Hat Security Advisory: ruby:3.3 security update Red Hat Security Advisories (RHSA) · Sep 17, 2026
- USN-7418-1 ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RLSA-2025:8131 Moderate: ruby security update Rocky Linux Security Advisories · Oct 8, 2025
- RLSA-2025:4493 Moderate: ruby:3.3 security update Rocky Linux Security Advisories · Oct 7, 2025
- RLSA-2025:10217 Moderate: ruby:3.3 security update Rocky Linux Security Advisories · Jul 29, 2025
- ELSA-2025-10217 Moderate: ruby:3.3 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 3, 2025
- ELSA-2025-8131 Moderate: ruby security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jun 27, 2025
- ELSA-2025-4493 Moderate: ruby:3.3 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 6, 2025
- ALAS2023-2025-929 Moderate: ruby3.2 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Apr 14, 2025
References
- https://github.com/ruby/net-imap/security/advisories/GHSA-7fc5-f82f-cx69
- https://github.com/ruby/net-imap/commit/70e3ddd071a94e450b3238570af482c296380b35
- https://github.com/ruby/net-imap/commit/c8c5a643739d2669f0c9a6bb9770d0c045fd74a3
- https://github.com/ruby/net-imap/commit/cb92191b1ddce2d978d01b56a0883b6ecf0b1022