shield Security update for ruby3.4

SUSE-SLE-Module-Basesystem-15-SP7-2026-3090

This update for ruby3.4 fixes the following issues - CVE-2026-42258: Net:IMAP: Command Injection via Symbol Arguments (bsc#1268011). - CVE-2026-47240: Net:IMAP: Command Injection via non-synchronizing literal in "raw" argument (bsc#1268337). - CVE-2026-47241: Net:IMAP: Denial of Service via incomplete raw argument validation (bsc#1268338). - CVE-2026-47242: Net:IMAP: Command Injection via ID and ENABLE command arguments (bsc#1268339). - CVE-2025-61594: merging URIs using the + operator could expose sensitive user credentials (bsc#1270034). Changes for ruby3.4: - Update to 3.4.10: - bundling net-imap 0.5.15.

• Release Date
  Jul 17 2026
• References
  Bugzilla: 1268011, 1268337, 1268338, 1268339, 1270034
  CVEs: CVE-2026-42258, CVE-2026-47240, CVE-2026-47241, CVE-2026-47242, CVE-2025-61594
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 x86_64

• Packages
  libruby3_4-3_4
  Dynamic runtime library for Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4
  An Interpreted Object-Oriented Scripting Language

  3.4.10-150700.3.4.1 lock rpm lock src

  ruby3.4-devel
  Development files to link against Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4-devel-extra
  Special development files of ruby, normally not installed

  3.4.10-150700.3.4.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libruby3_4-3_4
  Dynamic runtime library for Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4
  An Interpreted Object-Oriented Scripting Language

  3.4.10-150700.3.4.1 lock rpm lock src

  ruby3.4-devel
  Development files to link against Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4-devel-extra
  Special development files of ruby, normally not installed

  3.4.10-150700.3.4.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  libruby3_4-3_4
  Dynamic runtime library for Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4
  An Interpreted Object-Oriented Scripting Language

  3.4.10-150700.3.4.1 lock rpm lock src

  ruby3.4-devel
  Development files to link against Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4-devel-extra
  Special development files of ruby, normally not installed

  3.4.10-150700.3.4.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libruby3_4-3_4
  Dynamic runtime library for Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4
  An Interpreted Object-Oriented Scripting Language

  3.4.10-150700.3.4.1 lock rpm lock src

  ruby3.4-devel
  Development files to link against Ruby

  3.4.10-150700.3.4.1 lock rpm

  ruby3.4-devel-extra
  Special development files of ruby, normally not installed

  3.4.10-150700.3.4.1 lock rpm