Skip to content
fr Sign in
7.6 High

CVE-2026-42246 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby

Description

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue has been patched in versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4.

Affected products and versions

Product Affected versions Fixed in
net-imap 0.6 0.6.0 → < 0.6.4 0.6.4
net-imap 0.5 0.5.0 → < 0.5.14 0.5.14
net-imap 0.4 0.4.0 → < 0.4.24 0.4.24
net-imap 0.3 earliest → < 0.3.10 0.3.10
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 8100020260615131019.489197 earliest → < 8100020260615131019.489197e6 8100020260615131019.489197e6
Red Hat Enterprise Linux 9 9080020260619130154.9 earliest → < 9080020260619130154.9 9080020260619130154.9
Show the 33 other branches
Product Affected versions Fixed in
Red Hat Hardened Images 3.3 earliest → < 3.3.10-23.2.hum1 3.3.10-23.2.hum1
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat 3scale API Management Platform 2 Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux Server (v. 7 ELS) Versions not published
Red Hat Enterprise Linux Server Optional (v. 7 ELS) Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 7 Extended Lifecycle Support Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260630124058.522 earliest → < 8040020260630124058.522a0ee4 8040020260630124058.522a0ee4
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260630124058.522 earliest → < 8040020260630124058.522a0ee4 8040020260630124058.522a0ee4
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260630123825 earliest → < 8060020260630123825.ad008a3a 8060020260630123825.ad008a3a
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 8060020260630123825 earliest → < 8060020260630123825.ad008a3a 8060020260630123825.ad008a3a
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260625114827.63 earliest → < 8080020260625114827.63b34585 8080020260625114827.63b34585
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260625114827.63 earliest → < 8080020260625114827.63b34585 8080020260625114827.63b34585
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 9040020260630065449.9 earliest → < 9040020260630065449.9 9040020260630065449.9
Red Hat Enterprise Linux 9.6 Extended Update Support 9060020260630075016.9 earliest → < 9060020260630075016.9 9060020260630075016.9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of net-imap

The 10 CVEs of net-imap →
CVE-2026-47242 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Medium CVE-2026-47240 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Medium CVE-2026-47241 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 2.1 Low CVE-2026-42258 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Medium
Track this CVE