SB20261109148 - Anolis OS update for ruby:2.5 module

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261109148

SB20261109148 - Anolis OS update for ruby:2.5 module

Published: November 9, 2026

Security Bulletin ID SB20261109148
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Not Failing Securely ('Failing Open') (CVE-ID: CVE-2026-42246)

CWE-ID: CWE-636 - Not Failing Securely (\'Failing Open\')

CVSSv4: 7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an unauthenticated network attacker to bypass TLS and expose sensitive information transmitted by an IMAP client.

The vulnerability exists due to net-imap accepting an early success response during a STARTTLS upgrade of a plaintext connection without ensuring TLS is established. An unauthenticated network attacker can intercept the connection and inject a predictably tagged response before the command finishes, leaving subsequent traffic unencrypted when the client does not explicitly verify TLS.


2) Command injection (CVE-ID: CVE-2026-42258)

CWE-ID: CWE-77 - Command injection

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows an unprivileged local attacker to inject IMAP commands and delete mailboxes when a user triggers a vulnerable application command.

The vulnerability exists due to missing validation of Symbol arguments in net-imap when applications pass user-controlled input as Symbols to IMAP commands. An unprivileged local attacker can include CRLF sequences in a Symbol to terminate the original command and append a mailbox deletion command.


Remediation

Install update from vendor's website.

References