[CLSA-2026:1790764098] cyrus-imapd: Fix of CVE-2026-61915
Type:
security
Severity:
None
Release date:
2026-09-30 10:28:26 UTC
Description:
- use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching: icalproperty_get_value_as_string() returns NULL for a property parsed with an empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the httpd worker on the same authenticated CalDAV path as CVE-2026-61915
Updated packages:
  • cyrus-imapd-3.4.8-2.el9_6.tuxcare.els2.aarch64.rpm
    sha:f5b60bf3d79f4d29436af064beda258d09b6acc759a70b6ce1940992012b52f5
  • cyrus-imapd-3.4.8-2.el9_6.tuxcare.els2.i686.rpm
    sha:5463149fa21f74401bb7696da54a06e7113e5df62e616f52270218ad6562b30d
  • cyrus-imapd-3.4.8-2.el9_6.tuxcare.els2.x86_64.rpm
    sha:17eb4a97dbee08f1c58231c73e28c8d5eb7863fd89d001c0bfe2526baadc9487
  • cyrus-imapd-devel-3.4.8-2.el9_6.tuxcare.els2.aarch64.rpm
    sha:19cdeafd39d7860b5a387e0ed5dbc75fd214ffcb3d4dd59a9a0cc222dce8a9f3
  • cyrus-imapd-devel-3.4.8-2.el9_6.tuxcare.els2.i686.rpm
    sha:935dbfcc523d83bb8e33725f5f2d8f8d36f207e23dec591f0e0511612b600eb7
  • cyrus-imapd-devel-3.4.8-2.el9_6.tuxcare.els2.x86_64.rpm
    sha:8ca84be525285043506b771057fe99f52ca811d2f4744eaba471d3ced212d7eb
  • cyrus-imapd-doc-extra-3.4.8-2.el9_6.tuxcare.els2.noarch.rpm
    sha:bfc5feb40a0a1e0274b5f57b0e46463987f7fef698590db7570dabf9f244c682
  • cyrus-imapd-libs-3.4.8-2.el9_6.tuxcare.els2.aarch64.rpm
    sha:943889c47ca37696d1414d3c031c66984ad96fefa75fb8ceb663066f95335246
  • cyrus-imapd-libs-3.4.8-2.el9_6.tuxcare.els2.i686.rpm
    sha:eda3ab4545e5f48bb3ed067291b05e59df929dcb3113bf3de7dd6444fd73067c
  • cyrus-imapd-libs-3.4.8-2.el9_6.tuxcare.els2.x86_64.rpm
    sha:60871887731d6743fa77c7c548c776acd5b6e79e2a85f8dc712e7581ef8c4489
  • cyrus-imapd-utils-3.4.8-2.el9_6.tuxcare.els2.aarch64.rpm
    sha:d8d5d2ea4f8d9ff973cdeb9c489fddcbba4f13983e9aacc1abc0fb6e6a5252e9
  • cyrus-imapd-utils-3.4.8-2.el9_6.tuxcare.els2.i686.rpm
    sha:32b5d1a4d7dd3c733d311141b90a9b3f95e1bd4e3763f3c7b8378316c74820c6
  • cyrus-imapd-utils-3.4.8-2.el9_6.tuxcare.els2.x86_64.rpm
    sha:a4feaae8a438103f17217208e5dd51f9cbe5ad89719710979df4c9fb91870311
  • cyrus-imapd-virusscan-3.4.8-2.el9_6.tuxcare.els2.aarch64.rpm
    sha:ddc6035edce972f517e37dc13eae457e16f4ac1561e3547fa82967ad39b219d1
  • cyrus-imapd-virusscan-3.4.8-2.el9_6.tuxcare.els2.i686.rpm
    sha:10f8039ec6bee0c5940056807bf2e385546075767a37ac41c776ca730deb8a2c
  • cyrus-imapd-virusscan-3.4.8-2.el9_6.tuxcare.els2.x86_64.rpm
    sha:f191e3a320ed237fd29bb32d75dd032cb61a1e2e36c3ed79eb16d7daf378aadf
  • perl-Cyrus-3.4.8-2.el9_6.tuxcare.els2.aarch64.rpm
    sha:b5fb8ef9549ae3d594421a6021377f23a3738fcfed5dbc25d6bf79fb2d57f872
  • perl-Cyrus-3.4.8-2.el9_6.tuxcare.els2.i686.rpm
    sha:2ff090d26e6e215b49588931b1a7749ef707f8ae6b61a4f5f0a0681ad0cfc88d
  • perl-Cyrus-3.4.8-2.el9_6.tuxcare.els2.x86_64.rpm
    sha:26d144c6deea4a32f5c89d49b201fefe53a399f46829ea88cd51675c82027e6e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.