Release date:
2026-10-06 08:55:30 UTC
Description:
* SECURITY UPDATE: double free in CalDAV VPATCH BYPARAM handling
- debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION
parameter already freed by icalproperty_remove_parameter_by_ref()
- debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once
after the property loop in apply_property_updates()
- debian/patches/CVE-2026-61915-test.patch: add cunit regression test
- CVE-2026-61915
Updated packages:
-
cyrus-admin_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:3c5d3e693f63c20f253aa0e9653640ed5ccecade
-
cyrus-caldav_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:fa42c51455fc78606c6366ee166b96d62fea10f3
-
cyrus-clients_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:81c55984aae9b0da5edddbde4c3c8751cab88679
-
cyrus-common_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:7bddd2e4f0c59d9a0e5adb9aab958bc3835842f6
-
cyrus-dev_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:981b150e12271610c44673a030fee5d97d04ec1e
-
cyrus-doc_3.2.6-2+deb11u4+tuxcare.els1_all.deb
sha:caf475875d53de14bc3042fec6eb0f3fa805741b
-
cyrus-imapd_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:30fff114ff0cf3ae4167ca11409dce2dc294e19c
-
cyrus-murder_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:5aa5bf2bd21ca57788e042be5e4525c86458f9a3
-
cyrus-nntpd_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:b723832d5fc2c6ce7604b08ef878965600c6e606
-
cyrus-pop3d_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:8326519896e01958dbd6a46f5134b0ca835566b5
-
cyrus-replication_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:6ec6743b7192c6d5be8c6b80960f5eabff14fb62
-
libcyrus-imap-perl_3.2.6-2+deb11u4+tuxcare.els1_amd64.deb
sha:3f60678cbd80acee743cedd31734b8e03f41621e
-
cyrus-admin_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:687f6bcdcdf26b859b487cf5d3feeb17914418f3
-
cyrus-caldav_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:a697cb59250611b5da2c5172d74ff52e94593575
-
cyrus-clients_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:12dcd311bfedd168dafcaf8d1a6a41ae460e8666
-
cyrus-common_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:c46bec0d6b8808a6af508e71855bed8583d5a167
-
cyrus-dev_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:a99799ea6f4047105550906f7f6b4f2ba7eb57f0
-
cyrus-imapd_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:a32b6f75821141b800edbf354ae8a9636ef96952
-
cyrus-murder_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:6be6f9b1ddfc67db327521d6401a1fe66db86489
-
cyrus-nntpd_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:af2d2cc347cfc95bcd98c5a3f60546d043a9fdd0
-
cyrus-pop3d_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:180c01c4693e70e1c1e64e7a8463a9757bb21dd4
-
cyrus-replication_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:0a83e0d30c1e442d0ddda910b6da6d7d721a17b6
-
libcyrus-imap-perl_3.2.6-2+deb11u4+tuxcare.els1_arm64.deb
sha:37862ea95ca2fd51c002fea3afed3e632d49d0f2
-
cyrus-admin_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:db243162e47be917b612f35dff93cb48e4319b77
-
cyrus-caldav_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:396f12b4e044146fe98d9fbec0dc4b3d81225fe1
-
cyrus-clients_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:01874f0de9e54f001e0bf41dec1a9284221555b5
-
cyrus-common_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:295ac66a59a6e41092375c152bd860b3509c3dde
-
cyrus-dev_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:4341a131560f58c0364185103abc6c164bc9f0a6
-
cyrus-imapd_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:c8727e6d7b3d4283345da98a967b1d59ecfc19e2
-
cyrus-murder_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:18870355c548ab71d0ba92ad10fc3df79603eee0
-
cyrus-nntpd_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:f1c1f8389e31c80f2e645e314a5cd1c37ab71022
-
cyrus-pop3d_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:1fdc4d2d5348069786b419f61214b79c70a50349
-
cyrus-replication_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:533da8497269c7c53c5daa88d365d0d4d71e550e
-
libcyrus-imap-perl_3.2.6-2+deb11u4+tuxcare.els1_armel.deb
sha:b7bdbda3e21593a5de47e7c23de1d65bafb36b93
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
