Red Hat Product Errata RHSA-2026:33514 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33514 - Security Advisory Overview Updated Packages Synopsis Important: ruby:2.5 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the ruby:2.5 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2468498 - CVE-2026-42258 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments BZ - 2468499 - CVE-2026-42246 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS CVEs CVE-2026-42246 CVE-2026-42258 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM ruby-2.5.9-115.module+el8.10.0+24408+7ffaaa88.src.rpm SHA-256: fede8cc187e5739d0d57bb6caef5fea141b620a5cfa86e3e838a590c7addf448 rubygem-abrt-0.3.0-4.module+el8.10.0+22021+135c76a8.src.rpm SHA-256: 073ef5fb5f8b9019b307b6014a2cb7522f90d84f11d8be7cccd10eaa346abcfd rubygem-bson-4.3.0-2.module+el8.9.0+19193+435404ae.src.rpm SHA-256: 4aa50149e07750f1d8c4c5179ffde96a36c923edc8e7a588172fb00257d4b18b rubygem-bundler-1.16.1-5.module+el8.10.0+23088+750dc6ca.src.rpm SHA-256: e20efd4172eac3ec0218752147c9550b312db98c7343d7a58ddc8df96cf9e74f rubygem-mongo-2.5.1-2.module+el8.9.0+19193+435404ae.src.rpm SHA-256: c757116306fe7946e94494c6dccb2e06aaa904b692adea47ebbd34f1a239a4ff rubygem-mysql2-0.4.10-4.module+el8.9.0+19193+435404ae.src.rpm SHA-256: a409e26aeaafc61984de9972a7eccf563f92bf9e3bfd7737ddcac25b38340ae0 rubygem-pg-1.0.0-3.module+el8.9.0+19193+435404ae.src.rpm SHA-256: 8a5b0281143b18aaa9c0c6e64c24e2c194117ebfc8c998bca7b38b7aa971d0e9 x86_64 ruby-2.5.9-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: add4c82c28e4dbc27cfcfd51c15ebf694bd45abbffbdff3129b8d1aea83f99d0 ruby-2.5.9-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 8f877f605c15102f6e2214b984a08eba0ebaea1843332a5f4403408843bcf563 ruby-debuginfo-2.5.9-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: a83936d3e8a10e0733cbff00081a172bcbcf5b56547fc9cf16c5feeef424b3f5 ruby-debuginfo-2.5.9-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 62ff28bf260240fe0fca81bfe893ef6994ff494427acdbc68c57c199d3bf20e7 ruby-debugsource-2.5.9-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: d1011bc9d645972410e3b62e75c7bb17cb25abd43585751bd2bc34493518e94a ruby-debugsource-2.5.9-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 46ec8603b30659ef884c828bc38722f04cce09592f80712e69d05768d444ef53 ruby-devel-2.5.9-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: d3204ba31bb897651e51b4e97ae6ea874d79e999044274bf458647894ec92a8a ruby-devel-2.5.9-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: fac28c1971f774eec1a6be5e09de51a809acddb26b85e2c309b513ed4d52a941 ruby-doc-2.5.9-115.module+el8.10.0+24408+7ffaaa88.noarch.rpm SHA-256: 9660bba73e52a73129eb75ea4f7d90a268dcdeb64cb03404d4bb37e22c12bc10 ruby-irb-2.5.9-115.module+el8.10.0+24408+7ffaaa88.noarch.rpm SHA-256: 4e9ec2f33c4a3d9995f6bc487510055d9a45f7afc64d153484d22accbf322f5c ruby-libs-2.5.9-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 46b7bd3fc3c7e416b8b8a010fc3d36938fce78a27eb496814985b465e5a736e8 ruby-libs-2.5.9-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 847318444cd8d9504ac0d5eb1078e3ccf0b81dc7f15f07211c406c13a4c42fb5 ruby-libs-debuginfo-2.5.9-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 681e06d00c0a087f8835e281944d04403ebf8da2f27a09e941777973d6a2fec1 ruby-libs-debuginfo-2.5.9-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 70e87ca026ca009cc9d82b038951d3bd2565fe2b510edfd2db8b7b17454f8a17 rubygem-abrt-0.3.0-4.module+el8.10.0+22021+135c76a8.noarch.rpm SHA-256: e2f1fd4632238cf38207014eda28ab91ee9b2e41e876e9cb79b66307f2e22553 rubygem-abrt-doc-0.3.0-4.module+el8.10.0+22021+135c76a8.noarch.rpm SHA-256: 19b938b8034287ef6c692dbe1a491c34d49d245fee8927cba5991ab42b124cb7 rubygem-bigdecimal-1.3.4-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 1c08ee214c7d103f6b50383b7336f03d649c4a1addc3bd153d324d4280fc25b9 rubygem-bigdecimal-1.3.4-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: a283b59a6f18162ed1f692b3f907684330b058c8a5a1f9d0527b163cf35b6924 rubygem-bigdecimal-debuginfo-1.3.4-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: b4d0f10dfcf5248c205f611ef17221b820edb302921e775c60b900374da3afd1 rubygem-bigdecimal-debuginfo-1.3.4-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 0568965784d0518a067ba6f450f255fc2bdeac3504b3fd979f12a239c4ade3f4 rubygem-bson-4.3.0-2.module+el8.9.0+19193+435404ae.x86_64.rpm SHA-256: c37f302117e9d4c90482093da547bd2b9e0bb8040302ec9eb12e4c32e9bfbcb9 rubygem-bson-debuginfo-4.3.0-2.module+el8.9.0+19193+435404ae.x86_64.rpm SHA-256: 9116aec72459c5bcb2d76c9784e5e64c681d2d8f394771d2fb7b25425c5b25ee rubygem-bson-debugsource-4.3.0-2.module+el8.9.0+19193+435404ae.x86_64.rpm SHA-256: e4fbe7a82657489f586fcd91ffebf5fe7be1a0e4f5ad8dcddce5725c5357f7fd rubygem-bson-doc-4.3.0-2.module+el8.9.0+19193+435404ae.noarch.rpm SHA-256: 12be457d95f708825eeea9fc4e5473cac36c64b9ddfd7461a01056af3194f8c7 rubygem-bundler-1.16.1-5.module+el8.10.0+23088+750dc6ca.noarch.rpm SHA-256: 7bb47d88bc183647d838feccab2d86e4d56bf764c22c96c54373f07255eb89fb rubygem-bundler-doc-1.16.1-5.module+el8.10.0+23088+750dc6ca.noarch.rpm SHA-256: a2eb694d479182f2d887d16c4b89d9d3bc426aefad90bcdd5cbb06eecb7ede26 rubygem-did_you_mean-1.2.0-115.module+el8.10.0+24408+7ffaaa88.noarch.rpm SHA-256: ee1cd77c9829cd8f9394b3593274befe524eae2ce5523a5c6b7ab076e26530a1 rubygem-io-console-0.4.6-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 39bd9136362a0289d832b3964e81eade4a657a0ad147b353bb8d03b64689289c rubygem-io-console-0.4.6-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 199122bac83f4b8ae81f948d4b387d6824d1b03fb58d662c03d9808f663ce262 rubygem-io-console-debuginfo-0.4.6-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 67a6e900b866540f940a26557da36f4408e2b421337b6947f7bb03260bddb445 rubygem-io-console-debuginfo-0.4.6-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 505dced65479619275549a8a0eea09bd6d95a73c5a68ce1729db781e7ee232d3 rubygem-json-2.1.0-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 777f9dac209d0acaa2d4ea71b2854da9d8c6473bd2fa6614da4c6b3793c0d7d8 rubygem-json-2.1.0-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: d5c270228b693a548baf3a0d058136270917a66f7aa1894b31792f8c2c68d4fc rubygem-json-debuginfo-2.1.0-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 0dc3ee10edc6c6f2fd695188279c300e62c34611246a5ef80d0f5c91de56b730 rubygem-json-debuginfo-2.1.0-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 68ce7afd84f43be1549a6d8e080e30508af2b1df3a564c0c58ea2f9af59edd3c rubygem-minitest-5.10.3-115.module+el8.10.0+24408+7ffaaa88.noarch.rpm SHA-256: ecb8c9e97559ddb1249b751bbff374ae48e9ce85ae98cd99f918f1b529b8b7c9 rubygem-mongo-2.5.1-2.module+el8.9.0+19193+435404ae.noarch.rpm SHA-256: 50664d56462e6481d2e32a6bb13c1111f07b272a5d4b6fc3de4a7134e6ff15ce rubygem-mongo-doc-2.5.1-2.module+el8.9.0+19193+435404ae.noarch.rpm SHA-256: 0302ac8c5f6246f59629a18cd17cdf237d7525f84063e991eeb4efd53d453e74 rubygem-mysql2-0.4.10-4.module+el8.9.0+19193+435404ae.x86_64.rpm SHA-256: eed8372239af8f383ebab0630e1b59b1248cfc0dd192d283633ada921ec0f98c rubygem-mysql2-debuginfo-0.4.10-4.module+el8.9.0+19193+435404ae.x86_64.rpm SHA-256: 5fd344d5888ce7f4502d0dc0b0da726902bce66e6f7bd096be273028d2d7fcce rubygem-mysql2-debugsource-0.4.10-4.module+el8.9.0+19193+435404ae.x86_64.rpm SHA-256: 9e90f06acfdbc92eff7d5d29d96af221db2dbceed588d722b027296b68431740 rubygem-mysql2-doc-0.4.10-4.module+el8.9.0+19193+435404ae.noarch.rpm SHA-256: e8f79862d881740817d35d00f8fa9965a01913de7288524116af8e195b8ec1d3 rubygem-net-telnet-0.1.1-115.module+el8.10.0+24408+7ffaaa88.noarch.rpm SHA-256: 9be9661e3ad07329d5bbd59e9f0330b4bb63b6cb729005d3fcbdd6b26650ad68 rubygem-openssl-2.1.2-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: 367bfeaa0230faf1a8640cd0e6bd03e7227c6d33ac944975e9251a35b5eff500 rubygem-openssl-2.1.2-115.module+el8.10.0+24408+7ffaaa88.x86_64.rpm SHA-256: 9ff0639d71cd8cf95b1be801d48abc03f095167807bebeab963f85e9c317b909 rubygem-openssl-debuginfo-2.1.2-115.module+el8.10.0+24408+7ffaaa88.i686.rpm SHA-256: b77b630cb06f5fbc12b50831bd6a37bad5e82f25fcbb210b60f4c011952c4d1a rubygem-openssl-debuginfo-2.1.2-115.modu