Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

v0.4.20#449

Apr 22, 2025· 0 comments
Discussion options

What's Changed

🔒 Security

This release backports two features to prevent unbounded memory use: theresponse_handlers keyword argument toNet::IMAP.new so response handlers can be added before the server can send any responses (#427), and themax_response_size config attribute (#445,GHSA-j3g3-5qv5-52mj,CVE-2025-43857, reported by@Masamuneee).

Note

The defaultmax_response_size isnil (unlimited), to avoid backward compatibility issues with secure connections to trusted servers that are well-behaved. It can be configured more conservatively to guard against untrusted servers (for example, connecting to user-provided hostnames).It is the responsibility ofnet-imap users to configure their client appropriately for the server they are connecting to.

Known Issues

Fixed inv0.4.22: Older versions of Ruby 3.0 on Mac OS crash whennet/imap is required (#471).

Important

Ruby 3.0.7 is unaffected by#471 and was released on 2024-04-23. Ruby 3.0 has reached its EOL.

If you are affected by#471,upgrading Ruby is much more important than upgradingnet-imap!

Added

Documentation

Other Changes

Miscellaneous

Full Changelog:v0.4.19...v0.4.20


This discussion was created from the releasev0.4.20.
You must be logged in to vote

Replies: 0 comments

Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Labels
None yet
1 participant
@nevans

[8]ページ先頭

©2009-2025 Movatter.jp