Linux · Security advisory · July 16, 2026

ELSA-2026-33565: Security update for 24 packages

ELSA-2026-33565, released July 16, 2026, fixes 3 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0078
56th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
rubyol 100:3.3.10-13.el10_2
ruby-bundled-gemsol 100:3.3.10-13.el10_2
ruby-default-gemsol 100:3.3.10-13.el10_2
ruby-develol 100:3.3.10-13.el10_2
ruby-docol 100:3.3.10-13.el10_2
ruby-libsol 100:3.3.10-13.el10_2
rubygem-bigdecimalol 100:3.1.5-13.el10_2
rubygem-bundlerol 100:2.5.22-13.el10_2
rubygem-io-consoleol 100:0.7.1-13.el10_2
rubygem-irbol 100:1.13.1-13.el10_2
rubygem-jsonol 100:2.7.2-13.el10_2
rubygem-minitestol 100:5.20.0-13.el10_2
rubygem-power_assertol 100:2.0.3-13.el10_2
rubygem-psychol 100:5.1.2-13.el10_2
rubygem-raccol 100:1.7.3-13.el10_2
rubygem-rakeol 100:13.1.0-13.el10_2
rubygem-rbsol 100:3.4.0-13.el10_2
rubygem-rdocol 100:6.6.3.1-13.el10_2
rubygem-rexmlol 100:3.4.4-13.el10_2
rubygem-rssol 100:0.3.1-13.el10_2
rubygem-test-unitol 100:3.6.1-13.el10_2
rubygem-typeprofol 100:0.21.9-13.el10_2
rubygemsol 100:3.5.22-13.el10_2
rubygems-develol 100:3.5.22-13.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-42258 net-imap: Command Injection via unvalidated Symbol inputs 7.4 0.0078 None reported
High CVE-2026-42245 ruby4.0: Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 7.4 0.0041 None reported
High CVE-2026-42246 net-imap vulnerable to STARTTLS stripping via invalid response timing 7.4 0.0031 None reported
Showing 1 to 3 of 3 1