ROS-20240723-03

Vulnerability of Ruby interpreter’s Net::FTP class implementation is related to flaws in service data protection
using the PASV command. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information.
remotely, to gain unauthorized access to protected information

Vulnerability of the Net::IMAP class implementation of the Ruby interpreter is related to errors in the certificate validation procedure when processing the STASV command.
certificate authentication procedure when processing the STARTTLS command. Exploitation of the vulnerability could allow
an attacker acting remotely to realize a man-in-the-middle attack