[CLSA-2026:1791997969] Fix CVE(s): CVE-2026-61915
Type:
security
Severity:
Important
Release date:
2026-10-14 17:13:00 UTC
Description:
* SECURITY UPDATE: Double free in CalDAV VPATCH BYPARAM handling - debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION parameter already freed by icalproperty_remove_parameter_by_ref() - debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once after the property loop in apply_property_updates() - CVE-2026-61915
CVEs fixed:
Updated packages:
  • cyrus-admin_3.0.13-5+tuxcare.els1_all.deb
    sha:8085eeb5818fe2fb7c12d162d3df8aa3f773ce49
  • cyrus-caldav_3.0.13-5+tuxcare.els1_amd64.deb
    sha:b6136d49702232c9622c380fb58b970f5da25cc0
  • cyrus-clients_3.0.13-5+tuxcare.els1_amd64.deb
    sha:ea409bbe9ed026f47b885f09488564d55bfbbc10
  • cyrus-common_3.0.13-5+tuxcare.els1_amd64.deb
    sha:46634d6c575f80473a3adbf6ec6d076d17ba543b
  • cyrus-dev_3.0.13-5+tuxcare.els1_amd64.deb
    sha:de864df8326d64beebea18c1132d21d153d2804b
  • cyrus-doc_3.0.13-5+tuxcare.els1_all.deb
    sha:d5d25366fb710e87eff4af069416d8815b6d88b3
  • cyrus-imapd_3.0.13-5+tuxcare.els1_amd64.deb
    sha:ba7afd7ba8794c365c0f9888e5d1983e1e109aa8
  • cyrus-murder_3.0.13-5+tuxcare.els1_amd64.deb
    sha:b41f274779e353a259328a41f2b9618351eaa081
  • cyrus-nntpd_3.0.13-5+tuxcare.els1_amd64.deb
    sha:333ab6707ca4c46d42a45e164b6270e54fef3707
  • cyrus-pop3d_3.0.13-5+tuxcare.els1_amd64.deb
    sha:80ece5c6e00265bbcbc5541f34ebf80e49d4a589
  • cyrus-replication_3.0.13-5+tuxcare.els1_amd64.deb
    sha:920787585d71c93c0534bfd825ca597d529cf94a
  • libcyrus-imap-perl_3.0.13-5+tuxcare.els1_amd64.deb
    sha:02d14255597976ddddfa667d2328b2c8030b552b
  • cyrus-caldav_3.0.13-5+tuxcare.els1_arm64.deb
    sha:9d78eddf995c6b105a6e27ca115015547a0d2f1d
  • cyrus-clients_3.0.13-5+tuxcare.els1_arm64.deb
    sha:e316e7e166820490dec2318c13dc82cf0e8b359f
  • cyrus-common_3.0.13-5+tuxcare.els1_arm64.deb
    sha:3e5bc24fd9887e2c660c736776680e2ef637109a
  • cyrus-dev_3.0.13-5+tuxcare.els1_arm64.deb
    sha:531293b9a88cb34aaed2393381898627993b0b0f
  • cyrus-imapd_3.0.13-5+tuxcare.els1_arm64.deb
    sha:c41f72c5da65f3bc0798b5c0c09f95053eadbd31
  • cyrus-murder_3.0.13-5+tuxcare.els1_arm64.deb
    sha:8baf920c1d574e3b4a60e685f2595be3187c1b95
  • cyrus-nntpd_3.0.13-5+tuxcare.els1_arm64.deb
    sha:4997377e3b0e08c7b3d50742044c85477012bcc9
  • cyrus-pop3d_3.0.13-5+tuxcare.els1_arm64.deb
    sha:f9c177769dd4d79b9c643133a8351caac99a3b16
  • cyrus-replication_3.0.13-5+tuxcare.els1_arm64.deb
    sha:cf89dfc2d301059b7accbc6cb2ade212102eed62
  • libcyrus-imap-perl_3.0.13-5+tuxcare.els1_arm64.deb
    sha:86d22e8e44d82df21099d759dd07ade4b4e2ed88
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.