Threats Tagged 'cve-2026-42258'

Two security vulnerabilities have been identified in the Ruby Net::IMAP library affecting Red Hat Enterprise Linux 9 and related products. The first vulnerability (CVE-2026-42258) involves IMAP command injection via symbol arguments. The second vulnerability (CVE-2026-42246) allows information disclosure by bypassing TLS through a man-in-the-middle attack. Red Hat has issued an important security update to address these issues. The update is available for multiple Red Hat Enterprise Linux 9 variants and related CodeReady Linux Builder products. Users should apply the update as per Red Hat's guidance to mitigate these vulnerabilities.

This advisory addresses two security vulnerabilities in the Ruby 2.5 Net::IMAP library. The first vulnerability (CVE-2026-42258) is an IMAP command injection via symbol arguments. The second vulnerability (CVE-2026-42246) involves information disclosure through a man-in-the-middle attack bypassing TLS. Red Hat has released an important security update for Ruby 2.5 on Red Hat Enterprise Linux 8 to fix these issues.

Multiple security vulnerabilities have been identified in the Ruby 3.3 module related to the Net::IMAP library. These include a denial of service via crafted IMAP responses, IMAP command injection through symbol arguments, and information disclosure by bypassing TLS via man-in-the-middle attacks. Red Hat has issued an important security update for Ruby 3.3 on Red Hat Enterprise Linux 8 to address these issues.

Multiple security vulnerabilities have been identified in the Ruby net-imap library affecting Red Hat Enterprise Linux 10. These include a denial of service via crafted IMAP responses, an IMAP command injection via symbol arguments, and information disclosure through a man-in-the-middle attack bypassing TLS. Red Hat has issued an important security update (RHSA-2026:33540) addressing these issues. The update is available for various Red Hat Enterprise Linux 10 variants and related products. Users are advised to apply the update as detailed in the Red Hat advisory to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified in the Ruby programming language's Net::IMAP library, including denial of service via crafted IMAP responses, IMAP command injection through symbol arguments, and information disclosure by bypassing TLS via man-in-the-middle attacks. These issues affect Red Hat Enterprise Linux 10 and related products. Red Hat has issued a security advisory with updates to address these vulnerabilities.