Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-raccUpgrade rubygem-rakeUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-develUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-psychUpgrade ruby-docUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-bigdecimalUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-rbsUpgrade rubygem-pg | Jul 2, 2026 | Jun 30, 2026 |
| Redhat_linux | — | Upgrade ruby4.0Upgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-mysql2-debuginfoUpgrade ruby4.0-rubygem-pgUpgrade rubygem-pg-debugsourceUpgrade rubygem-raccUpgrade ruby-docUpgrade rubygem-test-unitUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-racc-debuginfoUpgrade rubygem-mysql2-docUpgrade rubyUpgrade ruby4.0-develUpgrade rubygem-bundlerUpgrade ruby4.0-debugsourceUpgrade ruby4.0-debuginfoUpgrade rubygem-irbUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rdocUpgrade ruby4.0-docUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade rubygem-pg-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-mysql2-debugsourceUpgrade ruby4.0-rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-abrt-docUpgrade rubygem-rakeUpgrade rubygem-psychUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-pg-docUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade rubygems-develUpgrade rubygem-rbs-debuginfoUpgrade rubygemsUpgrade ruby-bundled-gemsUpgrade rubygem-rssUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-minitestUpgrade rubygem-io-console | Jul 2, 2026 | May 9, 2026 |
| Rocky_linux | — | Upgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade ruby4.0-rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby4.0-debuginfoUpgrade rubygem-raccUpgrade ruby-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pgUpgrade rubygem-racc-debuginfoUpgrade ruby-libs-debuginfoUpgrade ruby4.0-debugsourceUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade ruby4.0-develUpgrade rubygem-bigdecimalUpgrade ruby4.0-rubygem-pgUpgrade rubygem-rbs-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-psychUpgrade rubygem-json-debuginfoUpgrade ruby-develUpgrade ruby4.0Upgrade ruby4.0-rubygem-mysql2Upgrade ruby-bundled-gems-debuginfoUpgrade ruby-debuginfo | Jul 3, 2026 | Jul 1, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub