From 74f46982ebfbec4d21b6fc8aff47f2e290307d36 Mon Sep 17 00:00:00 2001 From: nick evans Date: Wed, 30 Apr 2025 12:59:21 -0400 Subject: [PATCH] Bump net-imap to v0.4.21 for Ruby 3.3 (CVE-2025-43857) v0.4.20 addresses CVE-2025-43857 (GHSA-j3g3-5qv5-52mj). v0.4.21 fixes bugs in `Net::IMAP::SequenceSet`. --- gems/bundled_gems | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gems/bundled_gems b/gems/bundled_gems index 40d79c6a3c..42a167f771 100644 --- a/gems/bundled_gems +++ b/gems/bundled_gems @@ -12,7 +12,7 @@ test-unit 3.6.1 https://github.com/test-unit/test-unit rexml 3.3.9 https://github.com/ruby/rexml rss 0.3.1 https://github.com/ruby/rss net-ftp 0.3.4 https://github.com/ruby/net-ftp -net-imap 0.4.19 https://github.com/ruby/net-imap +net-imap 0.4.21 https://github.com/ruby/net-imap net-pop 0.1.2 https://github.com/ruby/net-pop net-smtp 0.5.1 https://github.com/ruby/net-smtp matrix 0.4.2 https://github.com/ruby/matrix