16840 matches found
net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS
A flaw was found in the Ruby net-imap library. When upgrading a cleartext IMAP connection to TLS using the Net::IMAPstarttls method, the library improperly handles certain responses received during STARTTLS negotiation. A man-in-the-middle MITM attacker can inject a predicted tagged OK response...
ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments
A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.5-35.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.5-35.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.5-35.hum1 noarch ruby4.0-devel-4.0.5-35.hum1 aarch64, x8664...
RHEL 9 : ruby:3.3 (RHSA-2026:37238)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37238 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 7 : ruby (RHSA-2026:37397)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:37397 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
Important Photon OS Security Update - PHSA-2026-5.0-92-0917
Updates of 'rubygem-oj' packages of Photon OS have been released...
Amazon Linux 2 : ruby, --advisory ALAS2-2026-3794 (ALAS-2026-3794)
The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3794 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14...
Important Photon OS Security Update - PHSA-2026-5.0-0917
Updates of 'rubygem-oj' packages of Photon OS have been released...
Important: ruby
Issue Overview: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAPstarttls to return "successfully", without starting TLS. This issue has been patched in...
Important Photon OS Security Update - PHSA-2026-4.0-1052
Updates of 'rubygem-nokogiri', 'python3-pyOpenSSL', 'python3-lxml', 'rubygem-concurrent-ruby', 'rubygem-oj' packages of Photon OS have been released...
Malicious code in zzwandsxabc119 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-10000 Malicious code in zztxtwtmp13 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9999 Malicious code in zztxtwtmp12 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9998 Malicious code in zztxtwtmp11 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9997 Malicious code in zztxtwtmp10 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zztxtwtmp08 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9996 Malicious code in zztxtwtmp09 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zztxtwtmp06 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...