Skip to content
OpenAdvisories

Description

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.

Affected products

VendorProductAffectedFixed
ruby net-imap < 0.4.24, >= 0.5.0, < 0.5.14, >= 0.6.0, < 0.6.4 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 ruby3.3 No fix yet —
Debian 13 ruby3.3 3.3.13-0+deb13u1 —
Debian 12 ruby3.1 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 jruby +1 No fix yet —
Ubuntu 25.10 jruby +1 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 ruby +5 3.3.10-13.el10_2 RHSA-2026:33565
RHEL 10 ruby4.0 +2 4.0.3-35.el10_2 RHSA-2026:33540
RHEL 10 ruby4.0-rubygem-mysql2 0.5.7-35.el10_2 RHSA-2026:33540
RHEL 10 ruby4.0-rubygem-pg 1.6.3-35.el10_2 RHSA-2026:33540
RHEL 10 rubygem-bigdecimal 3.1.5-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-bundler 2.5.22-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-io-console 0.7.1-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-irb 1.13.1-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-json 2.7.2-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-minitest 5.20.0-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-power_assert 2.0.3-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-psych 5.1.2-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-racc 1.7.3-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-rake 13.1.0-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-rbs 3.4.0-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-rdoc 6.6.3.1-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-rexml 3.4.4-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-rss 0.3.1-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-test-unit 3.6.1-13.el10_2 RHSA-2026:33565
RHEL 10 rubygem-typeprof 0.21.9-13.el10_2 RHSA-2026:33565
RHEL 10 rubygems +1 3.5.22-13.el10_2 RHSA-2026:33565
RHEL 9 ruby +5 3.3.10-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-bigdecimal 3.1.5-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-bundler 2.5.22-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-io-console 0.7.1-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-irb 1.13.1-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-json 2.7.2-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-minitest 5.20.0-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-mysql2 +1 0.5.5-3.module+el9.8.0+24356+77305e91 RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-pg +1 1.5.4-2.module+el9.8.0+24356+77305e91 RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-power_assert 2.0.3-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-psych 5.1.2-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-racc 1.7.3-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-rake 13.1.0-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-rbs 3.4.0-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-rdoc 6.6.3.1-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-rexml 3.4.4-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-rss 0.3.1-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-test-unit 3.6.1-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygem-typeprof 0.21.9-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 9 rubygems +1 3.5.22-7.module+el9.8.0+24406+8975e57f RHSA-2026:33577, RHSA-2026:33576
RHEL 8 ruby +5 3.3.10-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-abrt +1 0.4.0-1.module+el8.10.0+21226+b78a28c4 RHSA-2026:33515
RHEL 8 rubygem-bigdecimal 3.1.5-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-bundler 2.5.22-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-io-console 0.7.1-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-irb 1.13.1-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-json 2.7.2-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-minitest 5.20.0-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-mysql2 +1 0.5.5-1.module+el8.10.0+21226+b78a28c4 RHSA-2026:33515
RHEL 8 rubygem-pg +1 1.5.4-1.module+el8.10.0+21226+b78a28c4 RHSA-2026:33515
RHEL 8 rubygem-power_assert 2.0.3-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-psych 5.1.2-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-racc 1.7.3-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-rake 13.1.0-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-rbs 3.4.0-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-rdoc 6.6.3.1-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-rexml 3.4.4-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-rss 0.3.1-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-test-unit 3.6.1-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygem-typeprof 0.21.9-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
RHEL 8 rubygems +1 3.5.22-7.module+el8.10.0+24407+4a33a056 RHSA-2026:33515
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS ruby +5 3.3.10-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-bigdecimal 3.1.5-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-bundler 2.5.22-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-io-console 0.7.1-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-irb 1.13.1-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-json 2.7.2-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-minitest 5.20.0-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-power_assert 2.0.3-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-psych 5.1.2-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-racc 1.7.3-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-rake 13.1.0-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-rbs 3.4.0-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-rdoc 6.6.3.1-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-rexml 3.4.4-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-rss 0.3.1-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-test-unit 3.6.1-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygem-typeprof 0.21.9-11.el10_0.2 RHSA-2026:35895
RHEL 10.0 EUS rubygems +1 3.5.22-11.el10_0.2 RHSA-2026:35895
RHEL 9.6 EUS ruby +5 3.3.10-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-bigdecimal 3.1.5-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-bundler 2.5.22-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-io-console 0.7.1-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-irb 1.13.1-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-json 2.7.2-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-minitest 5.20.0-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-mysql2 +1 0.5.5-1.module+el9.4.0+21222+faeeed2f RHSA-2026:37238
RHEL 9.6 EUS rubygem-pg +1 1.5.4-1.module+el9.4.0+21222+faeeed2f RHSA-2026:37238
RHEL 9.6 EUS rubygem-power_assert 2.0.3-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-psych 5.1.2-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-racc 1.7.3-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-rake 13.1.0-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-rbs 3.4.0-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-rdoc 6.6.3.1-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-rexml 3.4.4-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-rss 0.3.1-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-test-unit 3.6.1-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygem-typeprof 0.21.9-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.6 EUS rubygems +1 3.5.22-6.module+el9.6.0+24475+76cce029 RHSA-2026:37238
RHEL 9.4 E4S ruby +5 3.3.10-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-bigdecimal 3.1.5-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-bundler 2.5.22-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-io-console 0.7.1-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-irb 1.13.1-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-json 2.7.2-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-minitest 5.20.0-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-mysql2 +1 0.5.5-1.module+el9.4.0+21222+faeeed2f RHSA-2026:36099
RHEL 9.4 E4S rubygem-pg +1 1.5.4-1.module+el9.4.0+21222+faeeed2f RHSA-2026:36099
RHEL 9.4 E4S rubygem-power_assert 2.0.3-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-psych 5.1.2-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-racc 1.7.3-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-rake 13.1.0-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-rbs 3.4.0-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-rdoc 6.6.3.1-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-rexml 3.4.4-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-rss 0.3.1-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-test-unit 3.6.1-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygem-typeprof 0.21.9-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
RHEL 9.4 E4S rubygems +1 3.5.22-7.module+el9.4.0+24474+8fc4d0bd RHSA-2026:36099
Red Hat Hardened Images 1 ruby3.3 +5 3.3.10-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 ruby3.4 +5 3.4.8-31.2.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 ruby4.0 +5 4.0.0-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem3.3-bigdecimal 3.1.5-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-bundler 2.5.22-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-devel +1 3.5.22-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-io-console 0.7.1-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-irb 1.13.1-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-json 2.7.2-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-minitest 5.20.0-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-power_assert 2.0.3-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-psych 5.1.2-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-racc 1.7.3-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-rake 13.1.0-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-rbs 3.4.0-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-rdoc 6.6.3.1-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-rexml 3.4.4-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-rss 0.3.1-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-test-unit 3.6.1-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.3-typeprof 0.21.9-23.2.hum1 RHSA-2026:33721
Red Hat Hardened Images 1 rubygem3.4-bigdecimal 3.1.8-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-bundler 2.6.9-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-devel +1 3.6.9-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-io-console 0.8.1-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-irb 1.14.3-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-json 2.9.1-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-minitest 5.25.4-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-power_assert 2.0.5-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-psych 5.2.2-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-racc 1.8.1-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-rake 13.2.1-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-rbs 3.8.0-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-rdoc 6.14.0-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-rexml 3.4.4-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-rss 0.3.1-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-test-unit 3.6.7-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem3.4-typeprof 0.30.1-31.hum1 RHSA-2026:38694, RHSA-2026:33552
Red Hat Hardened Images 1 rubygem4.0-bigdecimal 4.0.1-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-devel +2 4.0.3-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-io-console 0.8.2-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-irb 1.16.0-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-json 2.18.0-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-minitest 6.0.0-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-power_assert 3.0.1-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-psych 5.3.1-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-racc 1.8.1-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-rake 13.3.1-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-rbs 3.10.0-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-rdoc 7.0.3-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-rexml 3.4.4-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-rss 0.3.2-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-test-unit 3.7.5-33.4.hum1 RHSA-2026:33551
Red Hat Hardened Images 1 rubygem4.0-typeprof 0.31.1-33.4.hum1 RHSA-2026:33551

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 ruby +5 3.3.10-13.el10_2 ALSA-2026:33565
AlmaLinux 10 ruby4.0 +2 4.0.3-35.el10_2 ALSA-2026:33540
AlmaLinux 10 ruby4.0-rubygem-mysql2 0.5.7-35.el10_2 ALSA-2026:33540
AlmaLinux 10 ruby4.0-rubygem-pg 1.6.3-35.el10_2 ALSA-2026:33540
AlmaLinux 10 rubygem-bigdecimal 3.1.5-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-bundler 2.5.22-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-io-console 0.7.1-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-irb 1.13.1-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-json 2.7.2-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-minitest 5.20.0-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-power_assert 2.0.3-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-psych 5.1.2-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-racc 1.7.3-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-rake 13.1.0-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-rbs 3.4.0-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-rdoc 6.6.3.1-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-rexml 3.4.4-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-rss 0.3.1-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-test-unit 3.6.1-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygem-typeprof 0.21.9-13.el10_2 ALSA-2026:33565
AlmaLinux 10 rubygems +1 3.5.22-13.el10_2 ALSA-2026:33565
AlmaLinux 9 ruby +5 3.3.10-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-bigdecimal 3.1.5-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-bundler 2.5.22-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-io-console 0.7.1-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-irb 1.13.1-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-json 2.7.2-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-minitest 5.20.0-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-mysql2 +1 0.5.5-3.module_el9.7.0+184+e2e36072 ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-pg +1 1.5.4-2.module_el9.7.0+245+447713a2 ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-power_assert 2.0.3-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-psych 5.1.2-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-racc 1.7.3-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-rake 13.1.0-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-rbs 3.4.0-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-rdoc 6.6.3.1-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-rexml 3.4.4-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-rss 0.3.1-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-test-unit 3.6.1-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygem-typeprof 0.21.9-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 9 rubygems +1 3.5.22-7.module_el9.8.0+272+38177c5f ALSA-2026:33577, ALSA-2026:33576
AlmaLinux 8 ruby +5 3.3.10-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-abrt +1 0.4.0-1.module_el8.10.0+3799+191214cc ALSA-2026:33515
AlmaLinux 8 rubygem-bigdecimal 3.1.5-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-bundler 2.5.22-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-io-console 0.7.1-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-irb 1.13.1-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-json 2.7.2-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-minitest 5.20.0-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-mysql2 +1 0.5.5-1.module_el8.10.0+3799+191214cc ALSA-2026:33515
AlmaLinux 8 rubygem-pg +1 1.5.4-1.module_el8.10.0+3799+191214cc ALSA-2026:33515
AlmaLinux 8 rubygem-power_assert 2.0.3-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-psych 5.1.2-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-racc 1.7.3-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-rake 13.1.0-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-rbs 3.4.0-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-rdoc 6.6.3.1-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-rexml 3.4.4-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-rss 0.3.1-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-test-unit 3.6.1-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygem-typeprof 0.21.9-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515
AlmaLinux 8 rubygems +1 3.5.22-7.module_el8.10.0+4210+b037b1ec ALSA-2026:33515

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 ruby 3.3.10-13.el10_2 RLSA-2026:33565
Rocky Linux 10 ruby4.0 4.0.3-35.el10_2 RLSA-2026:33540
Rocky Linux 9 rubygem-mysql2 0.5.5-3.module+el9.7.0+40032+36e56d0d RLSA-2026:33577, RLSA-2026:33576
Rocky Linux 9 rubygem-pg 1.5.4-2.module+el9.7.0+40188+314ad260.0.1 RLSA-2026:33577, RLSA-2026:33576
Rocky Linux 8 rubygem-abrt 0.4.0-1.module+el8.5.0+668+665814fa RLSA-2026:33515
Rocky Linux 8 rubygem-mysql2 0.5.5-1.module+el8.10.0+1679+61871737 RLSA-2026:33515
Rocky Linux 8 rubygem-pg 1.5.4-1.module+el8.10.0+1679+61871737 RLSA-2026:33515
ReleasePackageFixed inAdvisory
Alpine v3.21 ruby-net-imap 0.4.25-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 ruby3.4 +5 3.4.8-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-bigdecimal 3.1.8-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-bundler 2.6.9-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-io-console 0.8.1-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-irb 1.14.3-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-json 2.9.1-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-minitest 5.25.4-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-power_assert 2.0.5-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-psych 5.2.2-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-racc 1.8.1-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-rake 13.2.1-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-rbs 3.8.0-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-rdoc 6.14.0-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-rexml 3.4.4-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-rss 0.3.1-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-test-unit 3.6.7-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygem-typeprof 0.30.1-27.amzn2023.0.6 ALAS2023-2026-1807
Amazon Linux 2023 ruby3.4-rubygems +1 3.6.9-27.amzn2023.0.6 ALAS2023-2026-1807

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 ruby +5 3.3.10-13.el10_2 ELSA-2026-33565
Oracle Linux 10 ruby4.0 +2 4.0.3-35.el10_2 ELSA-2026-33540
Oracle Linux 10 ruby4.0-rubygem-mysql2 0.5.7-35.el10_2 ELSA-2026-33540
Oracle Linux 10 ruby4.0-rubygem-pg 1.6.3-35.el10_2 ELSA-2026-33540
Oracle Linux 10 rubygem-bigdecimal 3.1.5-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-bundler 2.5.22-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-io-console 0.7.1-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-irb 1.13.1-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-json 2.7.2-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-minitest 5.20.0-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-power_assert 2.0.3-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-psych 5.1.2-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-racc 1.7.3-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-rake 13.1.0-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-rbs 3.4.0-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-rdoc 6.6.3.1-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-rexml 3.4.4-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-rss 0.3.1-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-test-unit 3.6.1-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygem-typeprof 0.21.9-13.el10_2 ELSA-2026-33565
Oracle Linux 10 rubygems +1 3.5.22-13.el10_2 ELSA-2026-33565
Oracle Linux 9 ruby +5 3.3.10-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-bigdecimal 3.1.5-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-bundler 2.5.22-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-io-console 0.7.1-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-irb 1.13.1-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-json 2.7.2-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-minitest 5.20.0-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-mysql2 +1 0.5.5-3.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-pg +1 1.5.4-2.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-power_assert 2.0.3-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-psych 5.1.2-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-racc 1.7.3-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-rake 13.1.0-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-rbs 3.4.0-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-rdoc 6.6.3.1-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-rexml 3.4.4-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-rss 0.3.1-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-test-unit 3.6.1-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygem-typeprof 0.21.9-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 9 rubygems +1 3.5.22-7.module+el9.8.0+90944+8975e57f ELSA-2026-33577, ELSA-2026-33576
Oracle Linux 8 ruby +5 3.3.10-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-abrt +1 0.4.0-1.module+el8.10.0+90287+d51aa4ed ELSA-2026-33515
Oracle Linux 8 rubygem-bigdecimal 3.1.5-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-bundler 2.5.22-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-io-console 0.7.1-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-irb 1.13.1-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-json 2.7.2-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-minitest 5.20.0-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-mysql2 +1 0.5.5-1.module+el8.10.0+90287+d51aa4ed ELSA-2026-33515
Oracle Linux 8 rubygem-pg +1 1.5.4-1.module+el8.10.0+90287+d51aa4ed ELSA-2026-33515
Oracle Linux 8 rubygem-power_assert 2.0.3-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-psych 5.1.2-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-racc 1.7.3-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-rake 13.1.0-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-rbs 3.4.0-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-rdoc 6.6.3.1-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-rexml 3.4.4-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-rss 0.3.1-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-test-unit 3.6.1-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygem-typeprof 0.21.9-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515
Oracle Linux 8 rubygems +1 3.5.22-7.module+el8.10.0+90936+88c9ba90 ELSA-2026-33515

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling jruby-10.1 10.1.1.0-r1 —
Wolfi rolling jruby-9.4 9.4.15.0-r2 —
Wolfi rolling kube-fluentd-operator 1.18.2-r70 —
Wolfi rolling logstash-9.3 +2 9.3.4-r1 —
Wolfi rolling ruby3.2-kube-logging-operator-fluentd-outputs +1 6.5.0-r2 —
Wolfi rolling ruby3.2-net-imap +2 0.6.4-r0 —
Wolfi rolling ruby3.2-rails-8.1 +1 8.1.3-r3 —
Wolfi rolling ruby3.3-rails-8.1 +1 8.1.3-r4 —
Wolfi rolling ruby3.4-net-imap 0.6.3-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems net-imap >= 0.6.0, < 0.6.4 0.6.4 GHSA-q2mw-fvj9-vvcw
RubyGems net-imap >= 0.5.0, < 0.5.14 0.5.14 GHSA-q2mw-fvj9-vvcw
RubyGems net-imap < 0.4.24 0.4.24 GHSA-q2mw-fvj9-vvcw

Advisories 31

References