0 releases 124 tags

RSS feed

• imports/c10s/ruby-3.3.10-13.el10 37db3a8398

  Compare

  Fix command injection via Symbol arguments in net-imap.

  Ghost released this 2026-07-09 11:03:37 +00:00 | -723 commits to c8-stream-2.5 since this release

  Fixes CVE-2026-42258.

  Tests not included, the gem does not have tests in the ruby tar.
  Original source PR#663 but it bunches more fixes together, so we backport less.

  https://github.com/ruby/net-imap/pull/663

  Backported from the following, the first commit below is requirement for the actual fix:
  github.com/ruby/net-imap@1eb27278a6
github.com/ruby/net-imap@bbd9eb7ecc

  Resolves: RHEL-181799

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads