Commit Graph

1 Commits

Author SHA1 Message Date
Jarek Prokop
37db3a8398 Fix command injection via Symbol arguments in net-imap.
Fixes CVE-2026-42258.

Tests not included, the gem does not have tests in the ruby tar.
Original source PR#663 but it bunches more fixes together, so we backport less.

https://github.com/ruby/net-imap/pull/663

Backported from the following, the first commit below is requirement for the actual fix:
1eb27278a6
bbd9eb7ecc

Resolves: RHEL-181799
2026-07-09 13:03:37 +02:00