Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
053a6285 by Salvatore Bonaccorso at 2026-05-16T14:17:53+02:00
Add new set of ruby issues for embedded Net::IMAP
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4534,15 +4534,35 @@ CVE-2026-42562 (Plainpad is a self hosted note taking
app. Prior to version 1.1.
CVE-2026-42333 (Quarkus OpenAPI Generator is Quarkus' extensions for
generation of Res ...)
NOT-FOR-US: Quarkus OpenAPI Generator
CVE-2026-42258 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
- TODO: check
+ - ruby3.3 <unfixed>
+ - ruby3.1 <removed>
+ - ruby2.7 <removed>
+ NOTE:
https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px
+ NOTE: Net::IMAP embedded in src:ruby* source package
CVE-2026-42257 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
- TODO: check
+ - ruby3.3 <unfixed>
+ - ruby3.1 <removed>
+ - ruby2.7 <removed>
+ NOTE:
https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg
+ NOTE: Net::IMAP embedded in src:ruby* source package
CVE-2026-42256 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
- TODO: check
+ - ruby3.3 <unfixed>
+ - ruby3.1 <removed>
+ - ruby2.7 <removed>
+ NOTE:
https://github.com/ruby/net-imap/security/advisories/GHSA-87pf-fpwv-p7m7
+ NOTE: Net::IMAP embedded in src:ruby* source package
CVE-2026-42246 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
- TODO: check
+ - ruby3.3 <unfixed>
+ - ruby3.1 <removed>
+ - ruby2.7 <removed>
+ NOTE:
https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp
+ NOTE: Net::IMAP embedded in src:ruby* source package
CVE-2026-42245 (Net::IMAP implements Internet Message Access Protocol (IMAP)
client fu ...)
- TODO: check
+ - ruby3.3 <unfixed>
+ - ruby3.1 <removed>
+ - ruby2.7 <removed>
+ NOTE:
https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw
+ NOTE: Net::IMAP embedded in src:ruby* source package
CVE-2026-41893 (Signal K Server is a server application that runs on a central
hub in ...)
NOT-FOR-US: Signal K Server
CVE-2026-8198 (The Activity Logs, User Activity Tracking, Multisite Activity
Log from ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/053a6285f854ee86dc2b3fa68b3e3bf3caddb524
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/053a6285f854ee86dc2b3fa68b3e3bf3caddb524
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
