USN-8431-1 ruby2.3, ruby2.5 vulnerabilities

It was discovered that Ruby's Net::IMAP library did not properly verify that Transport Layer Security TLS encryption was started after issuing a STARTTLS command. A remote attacker could possibly use this issue to perform a machine-in-the-middle attack and silently bypass TLS encryption...

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

Several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command injection. However, if a server does not support non-synchronizing literals, it may still be possible to inject arbitrary IMAP commands inside non-synchronizing literals. Details Raw...

Linux Distros Unpatched Vulnerability : CVE-2026-42257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands...

CVE-2026-42257

creationtimestamp| type| source ---|---|--- 2026-05-09 21:40:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7iqqghk2r 2026-05-10 12:01:25+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mliplujde42d 2026-07-18 12:01:11+00:00| seen|...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.4-net-imap, ruby3.4-rails, ruby3.2-rails, ruby3.3-rails, ruby4.0-net-imap, ruby4.0-rails, logstash, ruby3.2-net-imap, ruby3.3-net-imap, kube-logging-operator...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, kube-fluentd-operator, ruby4.0-rails, ruby3.2-rails, ruby3.2-net-imap, logstash-fips, ruby3.3-net-imap, ruby3.4-net-imap, ruby3.4-rails, ruby4.0-net-imap, kube-logging-operator, gitlab-rails-ce-fips, logstash, truffleruby...