{"id":"CLSA-2026-1792167430","summary":"ruby: Fix of 20 CVEs","details":"- CVE-2026-42246: fix Net::IMAP#starttls returning success without TLS\n  on a man-in-the-middle error response\n- CVE-2026-42258: fix IMAP command injection via Symbol arguments","modified":"2026-10-26T09:31:46.204884785Z","published":"2026-10-19T00:47:29Z","upstream":["CVE-2026-42246","CVE-2026-42258"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792167430.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2337"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2338"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2339"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9224"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9226"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9227"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9228"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28965"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31799"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32066"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41817"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41819"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28739"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49761"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27219"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27220"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27820"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42246"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42258"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80212"}],"affected":[{"package":{"name":"ruby","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/ruby?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"ruby-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/ruby-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"ruby-doc","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/ruby-doc?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"ruby-irb","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/ruby-irb?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"ruby-libs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/ruby-libs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"ruby-tcltk","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/ruby-tcltk?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-bigdecimal","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-bigdecimal?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-io-console","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-io-console?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-json","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-json?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-minitest","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-minitest?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-psych","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-psych?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-rake","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-rake?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygem-rdoc","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygem-rdoc?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygems","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygems?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}},{"package":{"name":"rubygems-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/rubygems-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792167430.json"}}],"schema_version":"1.9.0"}