Astra Linux – vulnerability in ruby2.5, jruby

An issue was found in Ruby versions 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails due to an unknown response; this may allow man-in-the-middle attackers to bypass TLS protections by positioning themselves between the client and the...