Threats Tagged 'cve-2026-42245'

Multiple security vulnerabilities have been identified in the Ruby 3.3 module related to the Net::IMAP library. These include a denial of service via crafted IMAP responses, IMAP command injection through symbol arguments, and information disclosure by bypassing TLS via man-in-the-middle attacks. Red Hat has issued an important security update for Ruby 3.3 on Red Hat Enterprise Linux 8 to address these issues.

Multiple security vulnerabilities have been identified in the Ruby net-imap library affecting Red Hat Enterprise Linux 10. These include a denial of service via crafted IMAP responses, an IMAP command injection via symbol arguments, and information disclosure through a man-in-the-middle attack bypassing TLS. Red Hat has issued an important security update (RHSA-2026:33540) addressing these issues. The update is available for various Red Hat Enterprise Linux 10 variants and related products. Users are advised to apply the update as detailed in the Red Hat advisory to mitigate these vulnerabilities.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically addressing multiple vulnerabilities in ruby4.0 packages. The update includes fixes for CVE-2026-42245, CVE-2026-42246, CVE-2026-42256, CVE-2026-47240, and CVE-2026-47242. These vulnerabilities relate to issues categorized under CWE-606 (Unchecked Input for Loop Condition) and CWE-325 (Missing Required Cryptographic Step). The advisory provides updated RPM packages for various ruby4.0 components across multiple architectures. No known exploits in the wild have been reported. The advisory does not explicitly list affected versions or detailed CVSS scores but classifies the severity as high.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically addressing vulnerabilities in ruby3.4 packages. The update includes multiple ruby3.4-related RPMs across various architectures. The advisory addresses three vulnerabilities identified by CVE-2026-42245, CVE-2026-42246, and CVE-2026-42256. These vulnerabilities are associated with weaknesses classified under CWE-606 and CWE-325. No explicit patch versions are listed in the advisory, but updated RPMs are provided. No known exploits are reported in the wild at this time.

Multiple security vulnerabilities have been identified in the Ruby programming language's Net::IMAP library, including denial of service via crafted IMAP responses, IMAP command injection through symbol arguments, and information disclosure by bypassing TLS via man-in-the-middle attacks. These issues affect Red Hat Enterprise Linux 10 and related products. Red Hat has issued a security advisory with updates to address these vulnerabilities.

Red Hat has issued a security advisory for its Hardened Images RPMs, specifically updating multiple ruby3.3 packages to address three vulnerabilities identified as CVE-2026-42245, CVE-2026-42246, and CVE-2026-42256. These vulnerabilities relate to issues categorized under CWE-606 (Unchecked Input for Loop Condition) and CWE-325 (Missing Required Cryptographic Step). The advisory provides updated RPM packages for various ruby3.3 components across multiple architectures. No explicit affected versions are stated, and no known exploits are reported in the wild. The update is classified as a security advisory with high severity. No direct CVSS score is provided, and no explicit patch links are included, but the advisory references updated RPMs available from Red Hat. The vendor advisory does not indicate that no action is required, so applying the update is recommended.