Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in `net-imap`'s response parser. At any time while the client is connected, a malicious server can send can send highly compressed `uid-set` data which is automatically read by the client's receiver thread. The response parser uses `Range#to_a` to convert the `uid-set` data into arrays of integers, with no limitation on the expanded size of the ranges. Versions 0.3.8, 0.4.19, 0.5.6, and higher fix this issue. Additional details for proper configuration of fixed versions and backward compatibility are available in the GitHub Security Advisory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rssUpgrade rubyUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-jsonUpgrade rubygem-rbsUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-abrt-docUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-pgUpgrade rubygem-psychUpgrade ruby-bundled-gemsUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-rakeUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade ruby-develUpgrade rubygem-raccUpgrade rubygem-test-unitUpgrade rubygem-bigdecimal | Jul 4, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-rbsUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2Upgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-default-gemsUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygems-develUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-docUpgrade ruby3.2-libsUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-io-console-debuginfo | Apr 15, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade ruby3.3 | May 15, 2025 | Feb 10, 2025 |
| Oracle_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-abrt-docUpgrade rubygem-raccUpgrade rubygemsUpgrade rubygem-abrtUpgrade ruby-bundled-gemsUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade ruby-docUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade ruby | May 7, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade rubyUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygem-abrtUpgrade rubygem-io-consoleUpgrade rubygem-rbs-debuginfoUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade rubygem-mysql2-docUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-raccUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rdocUpgrade rubygem-rssUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade ruby-bundled-gemsUpgrade rubygem-jsonNo solution existsUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygems-develUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-racc-debuginfo | May 7, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-raccUpgrade rubygem-mysql2-debugsourceUpgrade ruby-bundled-gemsUpgrade ruby-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-rbsUpgrade rubygem-mysql2Upgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-pg-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade ruby3.2Upgrade libruby3.2Upgrade libruby3.3Upgrade ruby3.3 | Apr 8, 2025 | Feb 10, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub