[CLSA-2026:1783525446] ruby: Fix of CVE-2026-42246
Type:
security
Severity:
Important
Release date:
2026-07-08 15:44:22 UTC
Description:
- CVE-2026-42246: fix Net::IMAP STARTTLS response-injection / TLS stripping by guarding send_command against a tagged OK arriving before the response handler runs, and raising InvalidResponseError when the STARTTLS handler is bypassed
CVEs fixed:
Updated packages:
  • ruby-3.0.4-160.el9_2.tuxcare.els16.i686.rpm
    sha:8a90c2fc573904109d7fb6329b9ef3b1e9d9ca5642ffcf505946486298750b91
  • ruby-3.0.4-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:4bf697c79fab31f51a9d9fe70a2f6311ee61a8351a297e5a67ae14c139de8380
  • ruby-default-gems-3.0.4-160.el9_2.tuxcare.els16.noarch.rpm
    sha:ae7c43e16e642e373e7a0919928203de7dcdc92836d5846e2a6d06f0c5c46693
  • ruby-devel-3.0.4-160.el9_2.tuxcare.els16.i686.rpm
    sha:938a22ebc8a0ac8698658ed0740b4da111d8ae1bd389f42b5ebcdf25929d10f4
  • ruby-devel-3.0.4-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:d4a8d54f214848f49c37edc9b992b3ddd7b0314ae07145be64ee78ad92d9c65d
  • ruby-doc-3.0.4-160.el9_2.tuxcare.els16.noarch.rpm
    sha:67ef8374d609c6bbd1ed8f3ee2769bd01c9806d623cdb713db4873aa7e670f15
  • ruby-libs-3.0.4-160.el9_2.tuxcare.els16.i686.rpm
    sha:173cc7e5447f32ef7a3364538847f845b76ea8730e29dbe6160e05901b6c67a1
  • ruby-libs-3.0.4-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:4cea1b93d92f04af91a102f9132d55a7b0b41d8e381516889994322bd5be67de
  • rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els16.i686.rpm
    sha:a43c9dd6f0b0059efc37e5145b38c115f3657013ce83051f4ffa41d8b244e9de
  • rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:d771c31085367fe7c0cf467d6064adaa81a4d8c4cb49d3210a354ae92f553f3f
  • rubygem-bundler-2.2.33-160.el9_2.tuxcare.els16.noarch.rpm
    sha:ac5ecb18429d4b318db7fd87eadb7d8258cb70aab58acc6c41d35bd9cc233a0f
  • rubygem-io-console-0.5.7-160.el9_2.tuxcare.els16.i686.rpm
    sha:13610d27bf65f4141eb78e5293db10a54f1bcfffe41ebceedf58757d5bf3fecb
  • rubygem-io-console-0.5.7-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:01c49914fdea49dc6acd31df9844bec8964eab1240c563d15bd9ec983c8ebeea
  • rubygem-irb-1.3.5-160.el9_2.tuxcare.els16.noarch.rpm
    sha:4af1b57087d10571c9007a27a7206723ccdc81707a60d8cea23af6954ed30057
  • rubygem-json-2.5.1-160.el9_2.tuxcare.els16.i686.rpm
    sha:7f44b1c626f3e7de8b2edcee9a396c920d130c52d9249e422f7e931ae7f65a10
  • rubygem-json-2.5.1-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:125b01e88d51b4e4e8abfea8e4d8b875e16d7db9a055b2f4a7ba4aec8731514c
  • rubygem-minitest-5.14.2-160.el9_2.tuxcare.els16.noarch.rpm
    sha:94406820452df97368b4cff6900657b29e2c06f36dcd930ff9330197276a7ef7
  • rubygem-power_assert-1.2.0-160.el9_2.tuxcare.els16.noarch.rpm
    sha:c34ebde8aeab0ebc1de2e140694fe845cabbb0b6903341e92a12f71df0dcdaf0
  • rubygem-psych-3.3.2-160.el9_2.tuxcare.els16.i686.rpm
    sha:9c2aa8f17894d3d0885518c98bd30104a1da7c841836bec27d31b73453b885b7
  • rubygem-psych-3.3.2-160.el9_2.tuxcare.els16.x86_64.rpm
    sha:ad1b3ab86379c19fa01d9dce951208b22815d0063ff880a8e6e7b632963c50e8
  • rubygem-rake-13.0.3-160.el9_2.tuxcare.els16.noarch.rpm
    sha:57adbf3c4348a93fd55fc0c8194fde495100466bc45c19faee2027ae357e954e
  • rubygem-rbs-1.4.0-160.el9_2.tuxcare.els16.noarch.rpm
    sha:73adba6e0aa4143032070d3393aac6f3e6713acd743f1e1754babfa4c5afaa98
  • rubygem-rdoc-6.3.3-160.el9_2.tuxcare.els16.noarch.rpm
    sha:877f0d30aaae7499d2f5e151587b745aea6e4f86d06c371bd3fc8e61edf4cc01
  • rubygem-rexml-3.3.3-160.el9_2.tuxcare.els16.noarch.rpm
    sha:44e5d810f2eb0a15a11a2fba7036995fb8b78f16d70fc71375b054addcf15619
  • rubygem-rss-0.2.9-160.el9_2.tuxcare.els16.noarch.rpm
    sha:6b04761da1d3280681fb67a3aeca920970b844b938c871f665bbfe33cdd2c532
  • rubygem-test-unit-3.3.7-160.el9_2.tuxcare.els16.noarch.rpm
    sha:c1e68a4b645f895b798b73dc774d95ea884d0946467e82535824fb416cac5a2b
  • rubygem-typeprof-0.15.2-160.el9_2.tuxcare.els16.noarch.rpm
    sha:96f2e66483020cc008ddb20f21185975dd93e629d72059e6ed979d3191f812f6
  • rubygems-3.2.33-160.el9_2.tuxcare.els16.noarch.rpm
    sha:d01d5663e4c9e35e0714cb6a7495a9f5d9aefe1278334984a130f0c4374f3845
  • rubygems-devel-3.2.33-160.el9_2.tuxcare.els16.noarch.rpm
    sha:1d2a627612b02eff1e1148935114db92cf143ec9ef8c85270d05a10cb1587c1e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.