ruby-3.0.7-167.el9_8
エラータID: AXSA:2026-1454:04
Release date:
Wednesday, August 5, 2026 - 15:08
Subject:
ruby-3.0.7-167.el9_8
Affected Channels:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
Ruby is an extensible, interpreted, object-oriented, scripting language. It has
features to process text files and to perform system management tasks.
Security Fix(es):
ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments
(CVE-2026-42258)
net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle
attack bypassing TLS (CVE-2026-42246)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
CVE(s):
CVE-2026-42246
CVE-2026-42258
Solution:
Update packages.
CVEs:
CVE-2026-42246
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.
CVE-2026-42258
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
Additional Info:
N/A
Download:
SRPMS
- ruby-3.0.7-167.el9_8.src.rpm
MD5: b017440315424d1c64e4f5783215ce58
SHA-256: 597dbeeb6a175842f8a30d379400625316ec9cd97c43641d2de955a234e2f367
Size: 15.33 MB
Asianux Server 9 for x86_64
- ruby-3.0.7-167.el9_8.i686.rpm
MD5: 51c0215725e6c48251663619bd20daee
SHA-256: 204f088f1a9fc1cafa325e65eb4f041d683bdb541be55ff954599a868938cf03
Size: 37.54 kB - ruby-3.0.7-167.el9_8.x86_64.rpm
MD5: a2343f804eeaf08006ba42194f86183f
SHA-256: b8db745db2b6f47b8e8d64dfc6869be9355ba936c45f069aaa4d839494743661
Size: 37.51 kB - ruby-default-gems-3.0.7-167.el9_8.noarch.rpm
MD5: eb45e926a3b3878b403a3e14c2370dd9
SHA-256: edf87dd90cf35de3b12f18b630b9e91390bc5a264cb8d7960318b4a5366de0c9
Size: 45.98 kB - ruby-devel-3.0.7-167.el9_8.i686.rpm
MD5: add446368041db31f2f7bdef71b6278b
SHA-256: 922a65457bc1a38a51a1f829b323dca44847da94cc1929dc697e4763be4ce67a
Size: 308.11 kB - ruby-devel-3.0.7-167.el9_8.x86_64.rpm
MD5: 1b1f7fa421e1f7cbf50e3247bb8dbcaf
SHA-256: 5900254495dddfd9b319b48450b70eae3a5b0f4f9395a6fe91a38dcf9e96bdc0
Size: 308.16 kB - ruby-doc-3.0.7-167.el9_8.noarch.rpm
MD5: f9a1699f3f26e5a97b2af552c6b949f9
SHA-256: abc90e718544dbb303eeec974a7a364fdc59244b0bc2fedf080961268b79e85c
Size: 7.47 MB - rubygem-bigdecimal-3.0.0-167.el9_8.x86_64.rpm
MD5: dfd8110c6b8633b715acdeeced91e28d
SHA-256: eb09c89ac08a6e280c14f3078156cdcece1f07c8337fce34f78c1bc5fda1b72b
Size: 50.75 kB - rubygem-bundler-2.2.33-167.el9_8.noarch.rpm
MD5: 688a50a1e7cf2fd86c443486d6a99e5c
SHA-256: 79a34ea4738125551fc400b4e738fbeecd87f50b014dbe5daafc83656c910a53
Size: 441.93 kB - rubygem-io-console-0.5.7-167.el9_8.x86_64.rpm
MD5: 708e7812fdb838cac60b91f3614b0930
SHA-256: 1e2463d6f982c225269e993a6017c2e45ee7b06d07f80872683b7ce870c7d239
Size: 21.84 kB - rubygem-irb-1.3.5-167.el9_8.noarch.rpm
MD5: 095d339413001fd29e34b490d3506ecf
SHA-256: a831f75df45e8195801e6c2910fc679a59ea6aed3e6a3fc75ffebef0bd9b6eb3
Size: 76.07 kB - rubygem-json-2.5.1-167.el9_8.x86_64.rpm
MD5: 7ba24c549efc15c2111221921141ef1f
SHA-256: ac74338609f65cd662e208b461027c486f323a0c0f52e1bd26114f0b4bb4b173
Size: 56.78 kB - rubygem-minitest-5.14.2-167.el9_8.noarch.rpm
MD5: 205ee7c41ab8d2ec0723b4721f05faf3
SHA-256: 987eba30e8600540d546ab0cbf2972936ab4a4415af0bbf5165ede42f4fb5213
Size: 84.74 kB - rubygem-power_assert-1.2.1-167.el9_8.noarch.rpm
MD5: f078bd02152dab8fa399220485d2e9d9
SHA-256: 14d5563cc8646b265ecaaf9452234764185cb5dfae2307f1940d4e071d9ddced
Size: 25.45 kB - rubygem-psych-3.3.2-167.el9_8.x86_64.rpm
MD5: 94d7f001e5f02280d873d08b45aaa1b1
SHA-256: 8b90199382314e8b7a39e1dd701e3322c50de83b3fd05125a40661bf8fdca4d1
Size: 57.36 kB - rubygem-rake-13.0.3-167.el9_8.noarch.rpm
MD5: 1e545dc065819291f19a390278687a21
SHA-256: 172201f140f2cc240f0777336b4f3435df2df61a423613dc74102e01c5978a7c
Size: 104.67 kB - rubygem-rbs-1.4.0-167.el9_8.noarch.rpm
MD5: e82c67efb12175ea84c467386b748e31
SHA-256: 1b3767ec1925cf94b8a806869c3f570bf0d42ea7afab2f65c0f1ee117f84f998
Size: 525.69 kB - rubygem-rdoc-6.3.4.1-167.el9_8.noarch.rpm
MD5: c480705dc2afff9cd8353052c573f04f
SHA-256: bf3f2c3779a508b91be23c8cf39c82ad0f2ac8a3ee83ee5c8e09d6bd9afaaafd
Size: 437.51 kB - rubygem-rexml-3.2.5-167.el9_8.noarch.rpm
MD5: 24cb6ad2e10e0e56a505fde4f388e163
SHA-256: e0c22c537412860742e0801dac4d3f2e9370e7937bf737ed1bb0d9e4e752df16
Size: 107.29 kB - rubygem-rss-0.2.9-167.el9_8.noarch.rpm
MD5: 10868ba5d6ba62b56ad9fa34e6ed9a14
SHA-256: 75b70d571c48dcd6ce810c92876f9a371564a7b9062f95d6c404f9963e0c775e
Size: 121.41 kB - rubygems-3.2.33-167.el9_8.noarch.rpm
MD5: ee8461063928bba91ddd7adf0ed1dab9
SHA-256: 3c990e7f6e9d005ade5b9806708d76bd8006f8e20a8ef9fe3680bcec49b38eb4
Size: 297.58 kB - rubygems-devel-3.2.33-167.el9_8.noarch.rpm
MD5: ec0ec0f080d53c09f64000af854e0e2f
SHA-256: 80d2d53b3de644affc0c63054340ad6017dbe6bbed504c782204e6d85dddda55
Size: 11.36 kB - rubygem-test-unit-3.3.7-167.el9_8.noarch.rpm
MD5: 5500f10d43be6a84fd6943a702cf3c97
SHA-256: 43b8d6b13433e35b061a10f0f7b3d2fc9ef68d65cdb0a3f2945e47f4b68fceba
Size: 144.07 kB - rubygem-typeprof-0.15.2-167.el9_8.noarch.rpm
MD5: b930725a67fbe1919b0d86fc7c3122c9
SHA-256: 9f19e032e687f2b28dd0599a05dddcbee9143c74f0de25bb95e27fac37688ab9
Size: 604.55 kB - ruby-libs-3.0.7-167.el9_8.i686.rpm
MD5: 0fd773083b4834bcb74b732a709880b6
SHA-256: 5d5152590bcdc4a6d3f63b3db7572d1683fa8878c3364505ee4c0040ab3e183e
Size: 3.34 MB - ruby-libs-3.0.7-167.el9_8.x86_64.rpm
MD5: e2f38baa2a4e29c639100289ad1d0763
SHA-256: 391cb162fa9beef314362dd3b5eff9980d74c8a9ebf5eac21a29e5bfcbd2c8a1
Size: 3.25 MB