The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in `net-imap`'s response parser. At any time while the client is connected, a malicious server can send can send highly compressed `uid-set` data which is automatically read by the client's receiver thread. The response parser uses `Range#to_a` to convert the `uid-set` data into arrays of integers, with no limitation on the expanded size of the ranges. Versions 0.3.8, 0.4.19, 0.5.6, and higher fix this issue. Additional details for proper configuration of fixed versions and backward compatibility are available in the GitHub Security Advisory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-pg-docUpgrade rubygem-test-unitUpgrade rubygem-raccUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-rssUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade rubygem-jsonUpgrade rubygem-abrt-docUpgrade ruby-docUpgrade rubygem-io-console | Jul 4, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-docUpgrade ruby3.2-libsUpgrade ruby3.2-default-gemsUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2 | Apr 15, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade ruby3.3 | May 15, 2025 | Feb 10, 2025 |
| Oracle_linux | — | Upgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-rakeUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubygem-abrtUpgrade ruby-bundled-gemsUpgrade rubygem-rssUpgrade rubyUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-mysql2-docUpgrade rubygem-io-consoleUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade ruby-default-gemsUpgrade rubygem-pgUpgrade rubygem-raccUpgrade rubygem-abrt-doc | May 7, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade rubygem-pg-debuginfoUpgrade rubygem-abrtUpgrade rubygem-raccUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-docUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoNo solution existsUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-racc-debuginfoUpgrade rubygem-rssUpgrade ruby-debugsourceUpgrade rubygem-test-unitUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade rubygems-develUpgrade ruby-libs-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-minitest | May 7, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade ruby-bundled-gems-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade ruby-debuginfoUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-raccUpgrade ruby-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-bigdecimalUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade rubygem-pg-debugsourceUpgrade rubygem-rbsUpgrade rubygem-mysql2Upgrade rubygem-pg-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade ruby3.2Upgrade libruby3.2Upgrade libruby3.3Upgrade ruby3.3 | Apr 8, 2025 | Feb 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub