[CLSA-2026:1784073521] ruby: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-14 23:58:55 UTC
Description:
- CVE-2026-42246: net-imap: fix STARTTLS stripping (TLS downgrade by MITM) - CVE-2026-42258: net-imap: validate Symbol flag args (CRLF injection)
CVEs fixed:
Updated packages:
  • ruby-3.0.7-165.el9_6.tuxcare.els6.i686.rpm
    sha:7b982b018d44bb35f45ce9eb98c10b58caafb8335aac3ef30d9d50bb5a0c7186
  • ruby-3.0.7-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:95a69001f1ff7d9617dd23f743d201dc84ae703ec7a4f7756e7e0d8073352297
  • ruby-default-gems-3.0.7-165.el9_6.tuxcare.els6.noarch.rpm
    sha:2d665c3d2d412e2ae928abf4c9a7c80c7d8e7553d60259134b53327eaed06bfb
  • ruby-devel-3.0.7-165.el9_6.tuxcare.els6.i686.rpm
    sha:6122f8af631d877ea2cc17866f5bf4c9fff0cb278dc96d39a1148d91dc870c9c
  • ruby-devel-3.0.7-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:5673278610345ace8da64db83d63f44d97a1a9e6aa8bfd91d141f7267866a20a
  • ruby-doc-3.0.7-165.el9_6.tuxcare.els6.noarch.rpm
    sha:98847d6e706eb8debdd18c426edf909650302dcaad30dcd97cf0499420ba7f0f
  • ruby-libs-3.0.7-165.el9_6.tuxcare.els6.i686.rpm
    sha:92e2ff65a2e62fb98bb4205e6963b4661e51482a04283ad31a75c6534767cb96
  • ruby-libs-3.0.7-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:2e9765537bdf62004b025d30ce6c190f3be7083d73c28b1345fdbc9c672415f6
  • rubygem-bigdecimal-3.0.0-165.el9_6.tuxcare.els6.i686.rpm
    sha:8c131f78196b5f7f7fe3758b358c98569e09b30344f6f5f31c77a2b4ff85882d
  • rubygem-bigdecimal-3.0.0-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:483edfe5feb0fd8c6b4ce297036be4772edcc3556c9dcb7f45cab539fb0ced52
  • rubygem-bundler-2.2.33-165.el9_6.tuxcare.els6.noarch.rpm
    sha:09e00cdce6f42c1f7cb5c3d7fcd40386ca1134eb2e6a6ada41a11abfacefe4f5
  • rubygem-io-console-0.5.7-165.el9_6.tuxcare.els6.i686.rpm
    sha:48b4092ab91e80552b8d01b60683c85bdd127c502413bd6b10872f7e2844f3b7
  • rubygem-io-console-0.5.7-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:ce27ddb0accdbe7fa6a37d1365644b9d9048f202a333546af64d1a67b5cc4217
  • rubygem-irb-1.3.5-165.el9_6.tuxcare.els6.noarch.rpm
    sha:4fa077ab6dc9fcaca0380fab1fb9b214045b8d7a2c11c0ec4630a2a0348cd023
  • rubygem-json-2.5.1-165.el9_6.tuxcare.els6.i686.rpm
    sha:50b5ace5e64e1f0fa692da0ab850fff09fdcaa09824bbc2dc14e184fbd9903c5
  • rubygem-json-2.5.1-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:58e1b32e3c2f785c9ef9153c2e2ef05ef79968d44ac478811ecb268590bf4064
  • rubygem-minitest-5.14.2-165.el9_6.tuxcare.els6.noarch.rpm
    sha:7cf3979f11fb1523caeb48d1c1e7d63c4c6db51eddd5d07726ca60603e4efcc0
  • rubygem-power_assert-1.2.1-165.el9_6.tuxcare.els6.noarch.rpm
    sha:d3417d6f7116827ae6ecf56bbc46f1295758d38a27e9a2b40229472f5d99e5f8
  • rubygem-psych-3.3.2-165.el9_6.tuxcare.els6.i686.rpm
    sha:57bbb21ca3dca3fa00097c9aba8334eb7240750c1b45de99e9ed03cc2a1ee833
  • rubygem-psych-3.3.2-165.el9_6.tuxcare.els6.x86_64.rpm
    sha:eeb968a8bc40b43fb1b3949164a2f3ef5119b157f2ee9e6c45c12d796efe0fed
  • rubygem-rake-13.0.3-165.el9_6.tuxcare.els6.noarch.rpm
    sha:16cce4f333ba9efed8cdcf85c2fd734d42034a18e9fa0d888ec4723578bda6ff
  • rubygem-rbs-1.4.0-165.el9_6.tuxcare.els6.noarch.rpm
    sha:ec159305e458a13c97309b4eda44a575f4f838fd7c10d31ef6f3d380a395e9b9
  • rubygem-rdoc-6.3.4.1-165.el9_6.tuxcare.els6.noarch.rpm
    sha:70b0be1a1de8304235a19504163ada263630ba6ddafc3d09071a9a58ffbd2a75
  • rubygem-rexml-3.2.5-165.el9_6.tuxcare.els6.noarch.rpm
    sha:c037fb33e9d3d9d1b5eaababcd0314bb8330a32326f044ab1b5ca5ec5a6bb430
  • rubygem-rss-0.2.9-165.el9_6.tuxcare.els6.noarch.rpm
    sha:64be7489126317eee078c3cad9e59ec7593b516f762482d4981543e04bf5e1e9
  • rubygem-test-unit-3.3.7-165.el9_6.tuxcare.els6.noarch.rpm
    sha:a5562c30d77ed61c76b01c1f894990620e8afd22373f586fa0f7d21907a0962b
  • rubygem-typeprof-0.15.2-165.el9_6.tuxcare.els6.noarch.rpm
    sha:eed4d58c902d3f4f2d915b78b67c26eea32a9f33cce5b7ee77bcfd9794789a47
  • rubygems-3.2.33-165.el9_6.tuxcare.els6.noarch.rpm
    sha:58194a0f74ed9b62d6aa162661029f686d1f981901301fb20c4041642a81e7cc
  • rubygems-devel-3.2.33-165.el9_6.tuxcare.els6.noarch.rpm
    sha:915d87b0572c40264f361ebe624a9b4950e0933e6b28125246e7981c6c0168aa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.