Release date:
2026-09-30 10:34:59 UTC
Description:
- use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching:
icalproperty_get_value_as_string() returns NULL for a property parsed with an
empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the
httpd worker on the same authenticated CalDAV path as CVE-2026-61915
Updated packages:
-
cyrus-imapd-3.0.7-23.el8.tuxcare.els2.i686.rpm
sha:7a01292c455a56d08ea1cedac05a37d65cecbce6433e6225e4e3e2b4c79a3bab
-
cyrus-imapd-3.0.7-23.el8.tuxcare.els2.x86_64.rpm
sha:112cc8be1bb7fa4c2b24ba8026b5b59869682263ac020dd518790f318ceb1e6d
-
cyrus-imapd-devel-3.0.7-23.el8.tuxcare.els2.i686.rpm
sha:0c98f7f0c935333695458871d202f48c64f98a7d1543b66f69d11db92265a48f
-
cyrus-imapd-devel-3.0.7-23.el8.tuxcare.els2.x86_64.rpm
sha:ac96fc38ecee7205226e4815fd81c26a8a1ad251363d58aae9534f423d418116
-
cyrus-imapd-doc-extra-3.0.7-23.el8.tuxcare.els2.noarch.rpm
sha:5bb6c850c93f71f4dc9b3a1a546065e85baba8b9f0ccab065db7017a6710ab01
-
cyrus-imapd-utils-3.0.7-23.el8.tuxcare.els2.i686.rpm
sha:1e8c168fb3518925f9d487a84557fd0e262325f773b2d7bf67c76960bbe53dcc
-
cyrus-imapd-utils-3.0.7-23.el8.tuxcare.els2.x86_64.rpm
sha:bb417e5e189e1febd47e243c69d0a7385cd8b82064c63969176b857f3eedefc1
-
cyrus-imapd-vzic-3.0.7-23.el8.tuxcare.els2.i686.rpm
sha:cfa32f8647d2752b30d7fc284ab4d003b5b122fb43eb24402665691b96dafa35
-
cyrus-imapd-vzic-3.0.7-23.el8.tuxcare.els2.x86_64.rpm
sha:7b900e4cf0449c3c1744432e21fa05beda4d2f9070d7889fb3ccb0d027904905
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
