Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-typeprofUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubygem-raccUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade ruby-docUpgrade rubygem-abrtUpgrade ruby-libsUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygems | Jul 2, 2026 | Jun 30, 2026 |
| Redhat_linux | — | Upgrade rubygem-irbUpgrade rubygem-io-console-debuginfoUpgrade ruby4.0-rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygem-racc-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade ruby-develUpgrade ruby-docUpgrade ruby4.0Upgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubygem-raccUpgrade ruby4.0-debugsourceUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade ruby4.0-docUpgrade ruby4.0-develUpgrade ruby4.0-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-rexmlUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade ruby4.0-rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-rssUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-pg-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-minitestUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-typeprofUpgrade ruby4.0-rubygem-mysql2-debuginfo | Jul 2, 2026 | May 9, 2026 |
| Rocky_linux | — | Upgrade ruby4.0-debuginfoUpgrade rubygem-raccUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade ruby4.0-rubygem-pg-debuginfoUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libsUpgrade rubygem-pg-debuginfoUpgrade rubygem-psychUpgrade rubygem-io-console-debuginfoUpgrade ruby4.0Upgrade ruby4.0-rubygem-pgUpgrade ruby4.0-develUpgrade rubygem-bigdecimalUpgrade ruby4.0-rubygem-mysql2Upgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pgUpgrade rubygem-rbs-debuginfoUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade ruby4.0-debugsourceUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-psych-debuginfo | Jul 3, 2026 | Jul 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub