- What: Security update for ruby with denial of service fix
- Impact: Addresses vulnerability in Net::IMAP module
Red Hat Product Errata RHSA-2026:33565 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33565 - Security Advisory Overview Updated Packages Synopsis Important: ruby security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ruby is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2468495 - CVE-2026-42245 ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses BZ - 2468498 - CVE-2026-42258 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments BZ - 2468499 - CVE-2026-42246 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS CVEs CVE-2026-42245 CVE-2026-42246 CVE-2026-42258 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM ruby-3.3.10-13.el10_2.src.rpm SHA-256: 7d9294307e2a51780bf6137faafcee95c987eb48bdbc5e06eccc3e828a95673a x86_64 ruby-3.3.10-13.el10_2.x86_64.rpm SHA-256: 7773283b3d677121cb81daefbecfeee7e8caaaacd5a70e7432e55c2e698246c7 ruby-bundled-gems-3.3.10-13.el10_2.x86_64.rpm SHA-256: aad2490488f0dcebf2a3f8f5ecf9785ab49c0f89ee0e881ce62152078865de3b ruby-bundled-gems-debuginfo-3.3.10-13.el10_2.x86_64.rpm SHA-256: 57fc36521388ca309c884461feae64b10f726748aef220d73f66a97cbc36f794 ruby-debuginfo-3.3.10-13.el10_2.x86_64.rpm SHA-256: 6888a39292cc7958afb2ad383248bdf1cf50d811cdfc113046536ef103802035 ruby-debugsource-3.3.10-13.el10_2.x86_64.rpm SHA-256: dadb1cd650b7071e3d30d2bec7f94f89fa3260e7158378c3130a96488e56dc0b ruby-default-gems-3.3.10-13.el10_2.noarch.rpm SHA-256: 15df201e034013b97435df590919e58454902265eab95f6c884875d388554ddf ruby-devel-3.3.10-13.el10_2.x86_64.rpm SHA-256: c7d6e54c3ccf7a48beb99fd9e6e37cdc575f7ec50bb5ceb94f3863c905419a6b ruby-libs-3.3.10-13.el10_2.x86_64.rpm SHA-256: 61a3e7f12abae683a63deeb6f36ef1c6733e517d53287ecddbc804cdca1a0cca ruby-libs-debuginfo-3.3.10-13.el10_2.x86_64.rpm SHA-256: 0fbb0e96a8b8d7a387328c6de8d8edb08cfc2e0524c59956ae6b1dc2dc8bed76 rubygem-bigdecimal-3.1.5-13.el10_2.x86_64.rpm SHA-256: a495624145866e3ff62c301b3fcc9a3bf371dd30f2201dac32de64a330866cfe rubygem-bigdecimal-debuginfo-3.1.5-13.el10_2.x86_64.rpm SHA-256: baaeda23ab531a269c915d52f0802ef09c44a33e9762ff1cb7bddc94ffea6cdf rubygem-bundler-2.5.22-13.el10_2.noarch.rpm SHA-256: ac125382c4f081befdf69b65c583d55bd35d040a82d704f4d85fe132bce50248 rubygem-io-console-0.7.1-13.el10_2.x86_64.rpm SHA-256: 8a33a2abe5409a325a1e551d8d7cd47cd37a36650e903ba48c35dba0c66ea308 rubygem-io-console-debuginfo-0.7.1-13.el10_2.x86_64.rpm SHA-256: 3b8e14c8d182793eaeac0230678316fafa840dde69c78f3962d41135448b0ddf rubygem-irb-1.13.1-13.el10_2.noarch.rpm SHA-256: e6ee605e57083e2825ddc6c61fb9a9cf1fd6eda492c3644c109ffc97021eb690 rubygem-json-2.7.2-13.el10_2.x86_64.rpm SHA-256: 62b5a37b2a74ce1e2722bfd080b8c41c40e4feb25370dca23247709556b017fa rubygem-json-debuginfo-2.7.2-13.el10_2.x86_64.rpm SHA-256: b6fc4454003076268365091c432b150a226ab07eb8a68cec6c47717adc99706f rubygem-minitest-5.20.0-13.el10_2.noarch.rpm SHA-256: 67e5c95d95322cc8f0dcc4ca3e314b366e219e308c69cc5850ad362d9f89f059 rubygem-power_assert-2.0.3-13.el10_2.noarch.rpm SHA-256: 816ef95133f506c8bb242627ced78f232c8580bfac14373c7c24434c3b635dc7 rubygem-psych-5.1.2-13.el10_2.x86_64.rpm SHA-256: aaef9a24e8b3a597dcdf1c231d9843b24b6b49413546c31b5d24660b2f2748ad rubygem-psych-debuginfo-5.1.2-13.el10_2.x86_64.rpm SHA-256: 714dba300c0c7db8a242052d1db3ffc2b227e550f7b0b364d2412ec6900c2a29 rubygem-racc-1.7.3-13.el10_2.x86_64.rpm SHA-256: 6d15c79209a4331c8b716a5b2d6f40fb861cae13d689695f265debe35b1069db rubygem-racc-debuginfo-1.7.3-13.el10_2.x86_64.rpm SHA-256: ba0ad67b2f5a11eed7ea79a13a7dfed51ea276c8fce72c60c7cc962b880c27a4 rubygem-rake-13.1.0-13.el10_2.noarch.rpm SHA-256: 863bbda9d27f5c92fb9faa5dca0414ae548e22924b70ecef24f1eec9ec00eb6f rubygem-rbs-3.4.0-13.el10_2.x86_64.rpm SHA-256: b7477e278c6bad1d3056fce7734a15f3844e4b5a2c1dc52b7ad3f27de5683563 rubygem-rbs-debuginfo-3.4.0-13.el10_2.x86_64.rpm SHA-256: 4066902614100e5a283bdb30dec30da7ce7d79b42d8c2bd3ad62a29a418ddc40 rubygem-rdoc-6.6.3.1-13.el10_2.noarch.rpm SHA-256: 4a2460ba7253e4e187eeb8811471c86fe932fff978545a00ccd83f849bf244de rubygem-rexml-3.4.4-13.el10_2.noarch.rpm SHA-256: 9c3bc9ce4782c650f2d931844a374e9043f8cdd739fbf60e789101f20fa25910 rubygem-rss-0.3.1-13.el10_2.noarch.rpm SHA-256: 02db9413aa602b2bac8a89143bf533eaad5623190a1ad38c549cf3060c03271b rubygem-test-unit-3.6.1-13.el10_2.noarch.rpm SHA-256: a0a469982c2b0a1df981f7d93bb0823f1bea940c80f413126898a35038069ca1 rubygem-typeprof-0.21.9-13.el10_2.noarch.rpm SHA-256: cec1dbc445bf858def97d05e0c872bf0ee7d8026ace520e8864f89062b3dd14e rubygems-3.5.22-13.el10_2.noarch.rpm SHA-256: 9b608fde6f398275d1999ad49aca432bb8179034d967c678a37324a30ab1ff10 rubygems-devel-3.5.22-13.el10_2.noarch.rpm SHA-256: 29f4612acb2fcc20759f34cf70c9a67ffb9a32eb1a691a79d6dd3ab08e6d03be Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM ruby-3.3.10-13.el10_2.src.rpm SHA-256: 7d9294307e2a51780bf6137faafcee95c987eb48bdbc5e06eccc3e828a95673a x86_64 ruby-3.3.10-13.el10_2.x86_64.rpm SHA-256: 7773283b3d677121cb81daefbecfeee7e8caaaacd5a70e7432e55c2e698246c7 ruby-bundled-gems-3.3.10-13.el10_2.x86_64.rpm SHA-256: aad2490488f0dcebf2a3f8f5ecf9785ab49c0f89ee0e881ce62152078865de3b ruby-bundled-gems-debuginfo-3.3.10-13.el10_2.x86_64.rpm SHA-256: 57fc36521388ca309c884461feae64b10f726748aef220d73f66a97cbc36f794 ruby-debuginfo-3.3.10-13.el10_2.x86_64.rpm SHA-256: 6888a39292cc7958afb2ad383248bdf1cf50d811cdfc113046536ef103802035 ruby-debugsource-3.3.10-13.el10_2.x86_64.rpm SHA-256: dadb1cd650b7071e3d30d2bec7f94f89fa3260e7158378c3130a96488e56dc0b ruby-default-gems-3.3.10-13.el10_2.noarch.rpm SHA-256: 15df201e034013b97435df590919e58454902265eab95f6c884875d388554ddf ruby-devel-3.3.10-13.el10_2.x86_64.rpm SHA-256: c7d6e54c3ccf7a48beb99fd9e6e37cdc575f7ec50bb5ceb94f3863c905419a6b ruby-libs-3.3.10-13.el10_2.x86_64.rpm SHA-256: 61a3e7f12abae683a63deeb6f36ef1c6733e517d53287ecddbc804cdca1a0cca ruby-libs-debuginfo-3.3.10-13.el10_2.x86_64.rpm SHA-256: 0fbb0e96a8b8d7a387328c6de8d8edb08cfc2e0524c59956ae6b1dc2dc8bed76 rubygem-bigdecimal-3.1.5-13.el10_2.x86_64.rpm SHA-256: a495624145866e3ff62c301b3fcc9a3bf371dd30f2201dac32de64a330866cfe rubygem-bigdecimal-debuginfo-3.1.5-13.el10_2.x86_64.rpm SHA-256: baaeda23ab531a269c915d52f0802ef09c44a33e9762ff1cb7bddc94ffea6cdf rubygem-bundler-2.5.22-13.el10_2.noarch.rpm SHA-256: ac125382c4f081befdf69b65c583d55bd35d040a82d704f4d85fe132bce50248 rubygem-io-console-0.7.1-13.el10_2.x86_64.rpm SHA-256: 8a33a2abe5409a325a1e551d8d7cd47cd37a36650e903ba48c35dba0c66ea308 rubygem-io-console-debuginfo-0.7.1-13.el10_2.x86_64.rpm SHA-256: 3b8e14c8d182793eaeac0230678316fafa840dde69c78f3962d41135448b0ddf rubygem-irb-1.13.1-13.el10_2.noarch.rpm SHA-256: e6ee605e57083e2825ddc6c61fb9a9cf1fd6eda492c3644c109ffc97021eb690 rubygem-json-2.7.2-13.el10_2.x86_64.rpm SHA-256: 62b5a37b2a74ce1e2722bfd080b8c41c40e4feb25370dca23247709556b017fa rubygem-json-debuginfo-2.7.2-13.el