[CLSA-2026:1792568971] Fix CVE(s): CVE-2026-61915
Type:
security
Severity:
Important
Release date:
2026-10-21 07:49:42 UTC
Description:
* SECURITY UPDATE: double free in CalDAV VPATCH BYPARAM handling - debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION parameter already freed by icalproperty_remove_parameter_by_ref() - debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once after the property loop in apply_property_updates() - CVE-2026-61915
CVEs fixed:
Updated packages:
  • cyrus-admin_3.0.8-6+deb10u6+tuxcare.els1_all.deb
    sha:fa78bc79f4c8dc020fb26c5a958ab44ee8afa3f4
  • cyrus-caldav_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:a304e2337be58f414dffeaf59a199c39482b4dd1
  • cyrus-clients_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:b5796e40709b2eba25b1d96ce9dc1dea99966598
  • cyrus-common_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:a2947faad1e85c557d6876ea1f6c986ae59f770d
  • cyrus-dev_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:69b1021fedcf36bd4d423f428d18e711a35431f2
  • cyrus-doc_3.0.8-6+deb10u6+tuxcare.els1_all.deb
    sha:4614e95ca32883d8eb0fc0450ee737f9c1f715ff
  • cyrus-imapd_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:dff997541d91f6daabf4e08a3c30cd726418c3ea
  • cyrus-murder_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:38ff5918252af9329ea4ca05d56fb0c61176d72c
  • cyrus-nntpd_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:37e72764c8a129f77e56c41ecebc977ad4a269fb
  • cyrus-pop3d_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:8a85edb7cf41da77735a81fffde35d618ae4b68f
  • cyrus-replication_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:dd7de2c21a7fcb151cbd65969bccb43fb7d9ce69
  • libcyrus-imap-perl_3.0.8-6+deb10u6+tuxcare.els1_amd64.deb
    sha:7eba84c8068b34486231385611bda66cd13d3991
  • cyrus-caldav_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:d8c79e2121605ba4cf68ce7a4defbddf9dea24a5
  • cyrus-clients_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:3fcd6eeb597ee49d33de3abbc9b2b00e2c8a06b7
  • cyrus-common_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:3981b2fe61c5e8ef783c5fbe5f094a36e678bbb1
  • cyrus-dev_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:01ab30405b919e7ec9e6eb5f7582563a27aade55
  • cyrus-imapd_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:0f3e1509d8b1f51b5791aac3a796e1f6cd2c9874
  • cyrus-murder_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:463a76bfa15b9ecd1de66683fcf783ae93d861a5
  • cyrus-nntpd_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:0e137539396adc34055f73b779cbd3cc078a0cd0
  • cyrus-pop3d_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:1c16e137ef87e5d9cc1fce084df698c8a3665122
  • cyrus-replication_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:6224c0b5a40aecf2b6291364bbfcb23009df065c
  • libcyrus-imap-perl_3.0.8-6+deb10u6+tuxcare.els1_arm64.deb
    sha:f4d228ee8fe91c7845567d1cac8f283d969d2628
  • cyrus-caldav_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:ac73509c0be88940caeea46ece7afe639abc9af5
  • cyrus-clients_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:e207cfa0dfa4fec7da0c27d9ef821f15cde8275a
  • cyrus-common_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:7081614a8f950cdda8bb58518d00edbfb0cb2138
  • cyrus-dev_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:5f8ae9563bdc65a1593977d2e1d6fb0beb3e6f4d
  • cyrus-imapd_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:d3d0a32f024651a718d89c0ed5f65f4112c3ec47
  • cyrus-murder_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:b0256763b16b4c4b46e13f1525073e0626e536fa
  • cyrus-nntpd_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:0b3e52136c461a73fa2170481615f13f8f608a5c
  • cyrus-pop3d_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:145f2b603f959dd3f9dbba2b2536bab34d705b8f
  • cyrus-replication_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:9e846c6bf6b1e45c44a559aae19bc8b76bdf064d
  • libcyrus-imap-perl_3.0.8-6+deb10u6+tuxcare.els1_armel.deb
    sha:2f4f307dc4cbab2e358b40604b3a52873344e05b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.