[Git][security-tracker-team/security-tracker][master] Add new set of ruby issues for embedded Net::IMAP

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
053a6285 by Salvatore Bonaccorso at 2026-05-16T14:17:53+02:00
Add new set of ruby issues for embedded Net::IMAP

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4534,15 +4534,35 @@ CVE-2026-42562 (Plainpad is a self hosted note taking app. Prior to version 1.1.
 CVE-2026-42333 (Quarkus OpenAPI Generator is Quarkus' extensions for generation of Res ...)
 	NOT-FOR-US: Quarkus OpenAPI Generator
 CVE-2026-42258 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
-	TODO: check
+	- ruby3.3 <unfixed>
+	- ruby3.1 <removed>
+	- ruby2.7 <removed>
+	NOTE: https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px
+	NOTE: Net::IMAP embedded in src:ruby* source package
 CVE-2026-42257 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
-	TODO: check
+	- ruby3.3 <unfixed>
+	- ruby3.1 <removed>
+	- ruby2.7 <removed>
+	NOTE: https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg
+	NOTE: Net::IMAP embedded in src:ruby* source package
 CVE-2026-42256 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
-	TODO: check
+	- ruby3.3 <unfixed>
+	- ruby3.1 <removed>
+	- ruby2.7 <removed>
+	NOTE: https://github.com/ruby/net-imap/security/advisories/GHSA-87pf-fpwv-p7m7
+	NOTE: Net::IMAP embedded in src:ruby* source package
 CVE-2026-42246 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
-	TODO: check
+	- ruby3.3 <unfixed>
+	- ruby3.1 <removed>
+	- ruby2.7 <removed>
+	NOTE: https://github.com/ruby/net-imap/security/advisories/GHSA-vcgp-9326-pqcp
+	NOTE: Net::IMAP embedded in src:ruby* source package
 CVE-2026-42245 (Net::IMAP implements Internet Message Access Protocol (IMAP) client fu ...)
-	TODO: check
+	- ruby3.3 <unfixed>
+	- ruby3.1 <removed>
+	- ruby2.7 <removed>
+	NOTE: https://github.com/ruby/net-imap/security/advisories/GHSA-q2mw-fvj9-vvcw
+	NOTE: Net::IMAP embedded in src:ruby* source package
 CVE-2026-41893 (Signal K Server is a server application that runs on a central hub in  ...)
 	NOT-FOR-US: Signal K Server
 CVE-2026-8198 (The Activity Logs, User Activity Tracking, Multisite Activity Log from ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/053a6285f854ee86dc2b3fa68b3e3bf3caddb524

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/053a6285f854ee86dc2b3fa68b3e3bf3caddb524
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260516/933428c6/attachment.htm>