Zero Radar
← feed
HighVulnerabilityupdated 30 Oct 2026, 15:03 UTC

Red Hat Enterprise Linux: flaws in cjose and ruby net-imap

Attackers on the internet may be able to tamper with data or crash services on affected Red Hat Linux systems. Some of the flaws could also let them bypass security checks or read private information.

Official source
SeverityHighVulnerability
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official sourceBacked by an official source

What happened

Red Hat Enterprise Linux is affected by vulnerabilities in the cjose library (data manipulation, and denial of service) and in the ruby net-imap component (several issues including denial of service, security bypass, data manipulation and information disclosure). The sources do not give further technical details.

Why it is dangerous: A remote attacker who needs no login could disrupt services or alter data handled by the affected components. Servers running these packages are at risk, especially if they are exposed to the internet.

Are you affected?

You are affected if you run Red Hat Enterprise Linux with the cjose or ruby net-imap packages installed.

Red Hat Enterprise Linux (cjose package); Red Hat Enterprise Linux (ruby net-imap package). Exact versions: unknown.

What to do

  1. Check whether your systems run the cjose or ruby net-imap packages from Red Hat Enterprise Linux
  2. Install the latest Red Hat security updates for these packages
  3. Restart affected services after updating
  4. Consult the official Red Hat security advisories for the exact fixed versions

Timeline

  1. 30 Oct 2026, 10:48 UTC
    Publicly disclosed
  2. 30 Oct 2026, 10:48 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  3. 30 Oct 2026, 10:50 UTC
    Picked up by Zero Radar
  4. 30 Oct 2026, 14:16 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  5. 30 Oct 2026, 14:58 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)

Sources 3 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
ZR-462fd552
Disclosed
30 Oct 2026, 10:48 UTC
On Zero Radar
30 Oct 2026, 10:50 UTC (2 min after disclosure)
Last change
30 Oct 2026, 15:03 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Red Hat Enterprise Linux: flaws in cjose and ruby net-imap · Zero Radar