[CLSA-2026:1790963865] cyrus-imapd: Fix of CVE-2026-61915
Type:
security
Severity:
Important
Release date:
2026-10-02 17:57:57 UTC
Description:
- fix CVE-2026-61915: double-free in the CalDAV VPATCH BYPARAM selector - do not free VPATCH parameters already removed by reference, which aborted the CalDAV worker before the CVE-2026-61915 path was reached - add the upstream cunit regression test for CVE-2026-61915
CVEs fixed:
Updated packages:
  • cyrus-imapd-3.4.1-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:e31372e845817f95e33d9f39930c67118ef7faafa0f89d322717853647b1e0b4
  • cyrus-imapd-3.4.1-7.el9_2.tuxcare.els2.i686.rpm
    sha:9b93a1c91fcb72fe8e803ec8fdff7654aff535b4d2aa66277ab0b17222b0cc55
  • cyrus-imapd-3.4.1-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:3448f78b999d72af0c17df5258a5e6a1c93b5bc49309c98fc73daf10d6a1d424
  • cyrus-imapd-devel-3.4.1-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:f0f133610973e2ab672e6cffba7dd922b58e3fb99a2192127f77ff7ccc75aa40
  • cyrus-imapd-devel-3.4.1-7.el9_2.tuxcare.els2.i686.rpm
    sha:2355cdf42c26ac2ebc0624dd457cd2b8829c9c53baf2eb5a2f3fedc5f15e68ce
  • cyrus-imapd-devel-3.4.1-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:f0ff3448f8fc6086f38c710e91a662c705f9446ba02e2921e1f6924af6efa97e
  • cyrus-imapd-doc-extra-3.4.1-7.el9_2.tuxcare.els2.noarch.rpm
    sha:09d1b3e532173be749eb6c49786e7589c2322b5061c049c218e449fe87487bec
  • cyrus-imapd-libs-3.4.1-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:dcc9898511478ef4d20bb0976ca05d4ea395648fa42520d919e6b386bd220408
  • cyrus-imapd-libs-3.4.1-7.el9_2.tuxcare.els2.i686.rpm
    sha:28b53773bf404c26a0dc6728babeb2bd017cdd33b90280318f07ab14496f9568
  • cyrus-imapd-libs-3.4.1-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:946e76e90740185328f5d280063ddf750da80a69f56f6a6f8ce240cacb72a9c6
  • cyrus-imapd-utils-3.4.1-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:e52f293f7e53407f28242a2719e1e208f94507962ffe8e8fe352d641890f77ec
  • cyrus-imapd-utils-3.4.1-7.el9_2.tuxcare.els2.i686.rpm
    sha:83677aa9e1089c31f3cbc433471894f625cef8b2ddaf1c0708ba1668cbfa9b5f
  • cyrus-imapd-utils-3.4.1-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:5ae484c6386092958c72b9bd1875662e20ecc27e975cb73f7843d852427d73f6
  • cyrus-imapd-virusscan-3.4.1-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:45636e6c004028f461005afdbd35d3e264769811281b0ccb03965621bfdd2fc9
  • cyrus-imapd-virusscan-3.4.1-7.el9_2.tuxcare.els2.i686.rpm
    sha:5e4dc2887401022fb813b556b9d70fdfdf703e10e587977b81a620ff1fafc7a4
  • cyrus-imapd-virusscan-3.4.1-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:8b879d0af4bdb01c454b271ba4aa21fdd371848252ba140e72cfcc98356ea215
  • perl-Cyrus-3.4.1-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:f9e38509310c7ac179334ad72d1293cb0117e4af4080cf78c9e92e72e46ea29e
  • perl-Cyrus-3.4.1-7.el9_2.tuxcare.els2.i686.rpm
    sha:73d0a07d081c43e47621cddc52e832b696113b9c65b5550d01dc156168e5d6b8
  • perl-Cyrus-3.4.1-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:04272c7ec6a3e344f633eac09d8faa7431893743a4fafb0bb0f276292fa8df29
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.