Red Hat Product Errata RHSA-2026:37397 - Security Advisory Issued: 2026-07-09 Updated: 2026-07-09 RHSA-2026:37397 - Security Advisory Overview Updated Packages Synopsis Important: ruby security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ruby is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2468498 - CVE-2026-42258 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments BZ - 2468499 - CVE-2026-42246 net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS CVEs CVE-2026-42246 CVE-2026-42258 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM ruby-2.0.0.648-39.el7_9.1.src.rpm SHA-256: 1d280667e297bb6b79d59cbc564ef39dbda531d035a5d67eeaf22b30a44b3f3d x86_64 ruby-2.0.0.648-39.el7_9.1.x86_64.rpm SHA-256: 5fe67b045d068c1ef769e5b3b51a618564c440ba0e3d75220628b717e3629056 ruby-debuginfo-2.0.0.648-39.el7_9.1.i686.rpm SHA-256: 87c5431c8dcb7d14a4634a69d2ef6674aae838e3e648df9c3d55b1882fcceb83 ruby-debuginfo-2.0.0.648-39.el7_9.1.x86_64.rpm SHA-256: 9ed805efe3fa8e0160c1a66899a6cb0d673a17848450d16a1204a454a1ce6b0d ruby-debuginfo-2.0.0.648-39.el7_9.1.x86_64.rpm SHA-256: 9ed805efe3fa8e0160c1a66899a6cb0d673a17848450d16a1204a454a1ce6b0d ruby-devel-2.0.0.648-39.el7_9.1.x86_64.rpm SHA-256: ed745753fa517e44b01eda35e43d6e9a2ec49d7e771abaf06f65550721d34de3 ruby-doc-2.0.0.648-39.el7_9.1.noarch.rpm SHA-256: 7f5e4c9d5bd91c2ede0ca77f1099c44262c8087dcaa6f6e53a712565044c8dc4 ruby-irb-2.0.0.648-39.el7_9.1.noarch.rpm SHA-256: 3c3b2977ed126d86074323ad09fbd8aae486664c30dba052651e5ec996c73214 ruby-libs-2.0.0.648-39.el7_9.1.i686.rpm SHA-256: 5e71011deacf298929488e6447e8616fe0fd705ec3c26a903f3239c3a8578f61 ruby-libs-2.0.0.648-39.el7_9.1.x86_64.rpm SHA-256: d462c9471f033954a3980d381f6d940645e4f4681042a649169c0d47cf32a4f4 ruby-tcltk-2.0.0.648-39.el7_9.1.x86_64.rpm SHA-256: 132085bb3dde39fc675b55bc6e12ca662cac8a1693d3dc357f03f5692d2599e0 rubygem-bigdecimal-1.2.0-39.el7_9.1.x86_64.rpm SHA-256: 1deb411d5b99205dbafc3dabbbb6a36005a77bac4a38d9de4b64e1663c9c5f82 rubygem-io-console-0.4.2-39.el7_9.1.x86_64.rpm SHA-256: a627d84e27b4469c8af214203d218b00584bd8f627ae37b3557f8d1c79311065 rubygem-json-1.7.7-39.el7_9.1.x86_64.rpm SHA-256: ce1096260a8a2c03fbb0314e00cce857959fee1ada425dfe29734d35f04cd91b rubygem-minitest-4.3.2-39.el7_9.1.noarch.rpm SHA-256: ca916cac31975ebe6a17323acac3ba1b8ff74babb47441967587111658357365 rubygem-psych-2.0.0-39.el7_9.1.x86_64.rpm SHA-256: 062fc1b5f88598b1a4231c72b1bac8796d8c2b496d7739638d1eedb2c8ef5bc7 rubygem-rake-0.9.6-39.el7_9.1.noarch.rpm SHA-256: 331a8ddceb80191b3ba48cb735f341c42ec36cdb31c92c433b87248bb597bf1f rubygem-rdoc-4.0.0-39.el7_9.1.noarch.rpm SHA-256: 98ce06d93dcc75e4bdd174d3f8f2d5dcb3b3cd9ff4d8c9b18ca8ee9fea3d2992 rubygems-2.0.14.1-39.el7_9.1.noarch.rpm SHA-256: 2dced525f5932c9e112cf47dd9203527088cb11b4f243d52c0e9985caf85ba9c rubygems-devel-2.0.14.1-39.el7_9.1.noarch.rpm SHA-256: 3dddedf9b21994219c83b1ffd88687c5ad215bb41fd59bcb1323397c5b3ac905 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM ruby-2.0.0.648-39.el7_9.1.src.rpm SHA-256: 1d280667e297bb6b79d59cbc564ef39dbda531d035a5d67eeaf22b30a44b3f3d s390x ruby-2.0.0.648-39.el7_9.1.s390x.rpm SHA-256: 1a3b70a00a52679d651a7c8baa792b35bffb5c01d3ffc9a29497fac3b623cace ruby-debuginfo-2.0.0.648-39.el7_9.1.s390.rpm SHA-256: 381ad63138ee48bca46ee187db09d45c53920136cd353f218b46bb7bf5c68c2f ruby-debuginfo-2.0.0.648-39.el7_9.1.s390x.rpm SHA-256: 3bd25e10bc00132564023c7a5dad94aa8168e300f8044acf80c7e1485f038c82 ruby-debuginfo-2.0.0.648-39.el7_9.1.s390x.rpm SHA-256: 3bd25e10bc00132564023c7a5dad94aa8168e300f8044acf80c7e1485f038c82 ruby-devel-2.0.0.648-39.el7_9.1.s390x.rpm SHA-256: 8ffd7e168b8287c3ba6d01f59fd4b7223163e43dc4c2cb70d9ef88beec52c54f ruby-doc-2.0.0.648-39.el7_9.1.noarch.rpm SHA-256: 7f5e4c9d5bd91c2ede0ca77f1099c44262c8087dcaa6f6e53a712565044c8dc4 ruby-irb-2.0.0.648-39.el7_9.1.noarch.rpm SHA-256: 3c3b2977ed126d86074323ad09fbd8aae486664c30dba052651e5ec996c73214 ruby-libs-2.0.0.648-39.el7_9.1.s390.rpm SHA-256: 0eef03232675b15c5c4cfbc78f2621f5af34c674988cc1e45497e77aca5b4d6a ruby-libs-2.0.0.648-39.el7_9.1.s390x.rpm SHA-256: f82213509d262a3709c1d64dab97fcf8536132f8b1781954f8a6a588a08d9533 ruby-tcltk-2.0.0.648-39.el7_9.1.s390x.rpm SHA-256: 5e98c6bce73598ab11c85485817d975b38570c369a4e8cd3862058c355f9c669 rubygem-bigdecimal-1.2.0-39.el7_9.1.s390x.rpm SHA-256: aea6d02071610d0d2472ecb0676f8555dd9deedca6d3073a3976eed58aabff3b rubygem-io-console-0.4.2-39.el7_9.1.s390x.rpm SHA-256: d362eac47735e7096472901fa72f9966779431caa50cecd403a55729c61ce282 rubygem-json-1.7.7-39.el7_9.1.s390x.rpm SHA-256: 4637760ceb57c13a6fea00b9bfbd71a8770dbf081b456add0664909b54ec68f7 rubygem-minitest-4.3.2-39.el7_9.1.noarch.rpm SHA-256: ca916cac31975ebe6a17323acac3ba1b8ff74babb47441967587111658357365 rubygem-psych-2.0.0-39.el7_9.1.s390x.rpm SHA-256: aa5b519ae0ed3e8d3bc1657f4293cdb0a8c78def58e8e7dbdd47d71acfdcb555 rubygem-rake-0.9.6-39.el7_9.1.noarch.rpm SHA-256: 331a8ddceb80191b3ba48cb735f341c42ec36cdb31c92c433b87248bb597bf1f rubygem-rdoc-4.0.0-39.el7_9.1.noarch.rpm SHA-256: 98ce06d93dcc75e4bdd174d3f8f2d5dcb3b3cd9ff4d8c9b18ca8ee9fea3d2992 rubygems-2.0.14.1-39.el7_9.1.noarch.rpm SHA-256: 2dced525f5932c9e112cf47dd9203527088cb11b4f243d52c0e9985caf85ba9c rubygems-devel-2.0.14.1-39.el7_9.1.noarch.rpm SHA-256: 3dddedf9b21994219c83b1ffd88687c5ad215bb41fd59bcb1323397c5b3ac905 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM ruby-2.0.0.648-39.el7_9.1.src.rpm SHA-256: 1d280667e297bb6b79d59cbc564ef39dbda531d035a5d67eeaf22b30a44b3f3d ppc64 ruby-2.0.0.648-39.el7_9.1.ppc64.rpm SHA-256: 53f9d0e00d6abd8467228638072e26b16ce170d8b4ee28eaa548a195f9375f1d ruby-debuginfo-2.0.0.648-39.el7_9.1.ppc.rpm SHA-256: 3a9ce76ee71aff42b109d4c9c4a411b41a1111d71b5cd2b56ee3298bb517cd87 ruby-debuginfo-2.0.0.648-39.el7_9.1.ppc64.rpm SHA-256: 34d63081350999de2ac1a7a5dafa2cb65b655c259db833d589fa108f6c9fdf25 ruby-debuginfo-2.0.0.648-39.el7_9.1.ppc64.rpm SHA-256: 34d63081350999de2ac1a7a5dafa2cb65b655c259db833d589fa108f6c9fdf25 ruby-devel-2.0.0.648-39.el7_9.1.ppc64.rpm SHA-256: e07718acb88ccbab37df672e068bb7a7e58075f36d275c2eb1f6797d85ea4d6c ruby-doc-2.0.0.648-39.el7_9.1.noarch.rpm SHA-256: 7f5e4c9d5bd91c2ede0ca77f1099c44262c8087dcaa6f6e53a712565044c8dc4 ruby-irb-2.0.0.648-39.el7_9.1.noarch.rpm SHA-256: 3c3b2977ed126d86074323ad09fbd8aae486664c30dba052651e5ec996c73214 ruby-libs-2.0.0.648-39.el7_9.1.ppc.rpm SHA-256: 3f6db5a4d306b9b77d45088fbc526f51f4501e45edebc6c30205abe0904be18b ruby-libs-2.0.0.648-39.el7_9.1.ppc64.rpm SHA-256: f674fa8f10b47d96b451fa7f98c02e1b3e25aeeaac11b10b127807d1cb136124 ruby-tcltk-2.0.0.648-39.el7_9.1.ppc64.rpm SHA-256: 1bb016a11cf4f8ebe28464dbeb299ae36fc28fdbf87adfb6dbc9118e62e6047b rubygem-bigdecimal-1.2.0-39.el7_9.1.ppc64.rpm SHA-256: 37df6f6d8599b3c645c3fceb15ceed86a5316096cbb02052f9cd552687710c18 rubygem-io-console-0.4.2-39.el7_9.1.ppc64.rpm SHA-256: 7d420af4924d0f39c5842f0bf43a4c5f6f161fa75319da8eddc38e4fa1c71391 rubygem-json-1.7.7-39.el7_9.1.ppc64.rpm SHA-256: bae28e9cc31934d40f9851b0c3d3bdea98e927235691e8d640905f918f719b02 rubygem-minitest-4.3.2-39.el7_9.1.noarch.rpm SHA-256: ca916cac31975ebe6a17323acac3ba1b8ff74babb47441967587111658357365 rubygem-psych-2.0.0-39.el7_9.1.ppc64.rpm SHA-256: da1dd2cba852c5938d80bbcd9dc8e25597f766700a66792d44185fe78ced6d08 rubygem-rake-0.9.6-39.el7_9.1.noarch.rpm SHA-256: 331a8ddceb80191b3ba48cb735f341c42ec36cdb31c92c433b87248bb597bf1f rubygem-rdoc-4.0.0-39.el7_9.1.noarch.rpm SHA-256: 98ce06d93dcc75e4bdd174d3f8f2d5dcb3b3cd9ff4d8c9b18ca8ee9fea3d2992 rubygems-2.0.14.1-39.el7_9.1.noarch.rpm SHA-256: 2dced525f5932c9e112cf47dd9203527088cb11b4f243d52c0e9985caf85ba9c rubygems-devel-2.0.14.1-39.el7_9.1.noarch.rpm SHA-256: 3dddedf9b21994219c83b1ffd88687c5ad215bb41fd59bcb1323397c5b3ac905 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM ruby-2.0.0.648-39.el7_9.1.src.rpm SHA-256: 1d280667e297bb6b79d59cbc564ef39dbda531d035a5d67eeaf22b30a44b3f3d ppc64le ruby-2.0.0.648-39.el7_9.1.ppc64le.rpm SHA-256: 20d559920b902919544f905f9a6b926f77e3fc84e5f14e138ab03ca3cd84c184 ruby-debuginfo-2.0.0.648-39.el7_9.1.ppc64le.rpm SHA-256: aba9b00f8848bcc50629b7c50890fa631b32043da1c7a5ccdc3f72b7bd3280cb ruby-debuginfo-2.0.0.648-3