Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in `net-imap`'s response parser. At any time while the client is connected, a malicious server can send can send highly compressed `uid-set` data which is automatically read by the client's receiver thread. The response parser uses `Range#to_a` to convert the `uid-set` data into arrays of integers, with no limitation on the expanded size of the ranges. Versions 0.3.8, 0.4.19, 0.5.6, and higher fix this issue. Additional details for proper configuration of fixed versions and backward compatibility are available in the GitHub Security Advisory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rssUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade rubygemsUpgrade ruby-bundled-gemsUpgrade rubygem-abrt-docUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-psychUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-pgUpgrade rubyUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-typeprofUpgrade rubygem-raccUpgrade rubygem-pg-docUpgrade rubygem-rdoc | Jul 4, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2Upgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-libsUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-docUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygems | Apr 15, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade ruby3.3 | May 15, 2025 | Feb 10, 2025 |
| Oracle_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-raccUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-pg-docUpgrade rubygem-rbsUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-bundled-gemsUpgrade rubygem-rexmlUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubyUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubygem-io-console | May 7, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade ruby-debugsourceUpgrade rubygem-minitestUpgrade rubygem-racc-debuginfoUpgrade rubygem-jsonUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade ruby-bundled-gemsNo solution existsUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-bundlerUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-rbs-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-raccUpgrade rubygem-mysql2-docUpgrade rubygem-abrt | May 7, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-raccUpgrade rubygem-pg-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade ruby-bundled-gemsUpgrade rubyUpgrade rubygem-racc-debuginfoUpgrade rubygem-psychUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-develUpgrade ruby-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-psych-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade ruby3.2Upgrade libruby3.2Upgrade libruby3.3Upgrade ruby3.3 | Apr 8, 2025 | Feb 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub