{"id":"CVE-2026-61915","aliases":["CLSA-2026-1790173408","CLSA-2026-1790252040","CLSA-2026-1790758129","CLSA-2026-1790764098","CLSA-2026-1790764490","CLSA-2026-1790769478","CLSA-2026-1790963865","CLSA-2026-1791997969","CLSA-2026-1792568971","DEBIAN-CVE-2026-61915","EUVD-2026-75168","GHSA-jxhj-wr2q-m255","UBUNTU-CVE-2026-61915","openSUSE-SU-2026:21929-1"],"status":"published","title":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An...","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00259,"percentile":0.17708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2026-09-09T00:00:00Z","modified":"2026-10-28T02:31:10Z","fixes":[{"ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd","fixed_in":["3.0.7-23.el8.tuxcare.els1","3.0.7-23.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-devel","fixed_in":["3.0.7-23.el8.tuxcare.els1","3.0.7-23.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-doc-extra","fixed_in":["3.0.7-23.el8.tuxcare.els1","3.0.7-23.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-utils","fixed_in":["3.0.7-23.el8.tuxcare.els1","3.0.7-23.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-vzic","fixed_in":["3.0.7-23.el8.tuxcare.els1","3.0.7-23.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd","fixed_in":["3.0.7-20.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-devel","fixed_in":["3.0.7-20.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-doc-extra","fixed_in":["3.0.7-20.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-utils","fixed_in":["3.0.7-20.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-vzic","fixed_in":["3.0.7-20.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-devel","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-doc-extra","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-libs","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-utils","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-virusscan","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"perl-Cyrus","fixed_in":["3.4.8-2.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd","fixed_in":["3.0.7-24.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-devel","fixed_in":["3.0.7-24.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-doc-extra","fixed_in":["3.0.7-24.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-utils","fixed_in":["3.0.7-24.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-vzic","fixed_in":["3.0.7-24.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-devel","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-doc-extra","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-libs","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-utils","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-virusscan","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"perl-Cyrus","fixed_in":["3.4.1-7.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-admin","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-caldav","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-clients","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-common","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-dev","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-doc","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-imapd","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-murder","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-nntpd","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-pop3d","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-replication","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcyrus-imap-perl","fixed_in":["3.0.13-5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-admin","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-caldav","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-clients","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-common","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-dev","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-doc","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-imapd","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-murder","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-nntpd","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-pop3d","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"cyrus-replication","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcyrus-imap-perl","fixed_in":["3.0.8-6+deb10u6+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cyrus-imapd","fixed_in":["3.12.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-virusscan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"perl-Cyrus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-vzic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-20.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-20.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-20.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-20.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"cyrus-imapd-vzic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-20.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cyrus-imapd-virusscan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"perl-Cyrus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-2.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"cyrus-imapd-vzic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-23.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-24.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-24.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-24.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-24.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"cyrus-imapd-vzic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-24.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-doc-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cyrus-imapd-virusscan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"perl-Cyrus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-caldav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-murder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-nntpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-pop3d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"cyrus-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcyrus-imap-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-caldav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-murder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-nntpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-pop3d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"cyrus-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcyrus-imap-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.0-1","3.10.0~beta1-1","3.10.0~beta1-2","3.10.0~beta1-3","3.10.0~beta2-1","3.10.0~rc2-1","3.10.1-1","3.10.1-2","3.10.1-3","3.10.1-3~bpo12+1","3.10.2-1","3.10.2-1~bpo12+1","3.12.0-1","3.12.0-2","3.12.1-1","3.12.1-2","3.12.1-3","3.12.2-1","3.12.3-1","3.12.3-1~bpo13+1","3.12.3-2","3.12.3-3","3.12.3-4","3.12.4-1","3.6.1-4","3.6.1-4+deb12u1","3.6.1-4+deb12u2","3.6.1-4+deb12u3","3.6.1-4+deb12u4","3.6.1-4+deb12u5","3.8.0-1","3.8.0-2","3.8.0-3","3.8.0-4","3.8.0-5","3.8.0~beta1-1","3.8.0~beta2-1","3.8.0~rc1-1","3.8.1-1","3.8.1-1~bpo12+1","3.8.1-2","3.8.1-3","3.8.2-1","3.8.3-1","3.8.4-1"]},{"source":"osv","ecosystem":"Debian:13","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.2-1","3.10.2-1+deb13u1","3.10.2-1+deb13u2","3.12.0-1","3.12.0-2","3.12.1-1","3.12.1-2","3.12.1-3","3.12.2-1","3.12.3-1","3.12.3-1~bpo13+1","3.12.3-2","3.12.3-3","3.12.3-4","3.12.4-1"]},{"source":"osv","ecosystem":"Debian:14","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.4-1"}]}],"versions":["3.10.2-1","3.12.0-1","3.12.0-2","3.12.1-1","3.12.1-2","3.12.1-3","3.12.2-1","3.12.3-1","3.12.3-1~bpo13+1","3.12.3-2","3.12.3-3","3.12.3-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.10-3build1","2.5.10-3build2","2.5.10-3ubuntu1","2.5.10-3ubuntu1.1","2.5.10-3ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.11-1","3.0.11-1build1","3.0.12-1","3.0.12-2","3.0.12-2ubuntu2","3.0.12-2ubuntu3","3.0.13-2ubuntu1","3.0.13-3ubuntu1","3.0.13-4ubuntu1","3.0.13-5","3.0.13-5ubuntu0.1~esm1","3.0.13-5ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.6-2build1","3.4.2-2","3.4.2-2build1","3.4.3-2","3.4.3-3","3.4.3-3build2","3.4.3-3ubuntu0.1","3.4.3-3ubuntu0.1+esm1","3.4.3-3ubuntu0.3","3.4.3-3ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-5","3.8.1-1","3.8.1-1build1","3.8.1-1build2","3.8.1-3","3.8.1-3build3","3.8.2-1","3.8.2-1ubuntu0.1~esm1","3.8.2-1ubuntu0.2","3.8.2-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.12.1-3","3.12.2-1","3.12.2-1build1","3.12.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.10.2-1","3.12.1-2","3.12.1-2build1","3.12.1-3"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cyrus-imapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.8-bp160.1.1"}]}],"bundled":6}],"products":[{"vendor":"cyrus","product":"imap"},{"vendor":"cyrusimap","product":"cyrus imap"}],"references":[{"url":"https://cyrusimap.org","tags":["Product","web"]},{"url":"https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html","tags":["Release Notes","web"]},{"url":"https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html","tags":["Release Notes","web"]},{"url":"https://www.cyrusimap.org/3.12/imap/download/release-notes/3.8/x/3.8.8.html","tags":["Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61915","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jxhj-wr2q-m255"},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790173408.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61911","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1790252040.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1790758129.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790764098.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1790764490.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1790769478.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1790963865.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1791997969.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792568971.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61915.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-61915","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-61915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61915","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1279908","tags":["report"]},{"url":"https://bugzilla.suse.com/1279975","tags":["report"]},{"url":"https://bugzilla.suse.com/1279976","tags":["report"]},{"url":"https://bugzilla.suse.com/1279977","tags":["report"]},{"url":"https://bugzilla.suse.com/1279978","tags":["report"]},{"url":"https://bugzilla.suse.com/1279979","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61915","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-61915","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T00:00:00Z","modified":"2026-09-10T14:47:05.215Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:19:53.786088Z"}],"euvd":[{"id":"EUVD-2026-75168","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T00:00:00Z","modified":"2026-09-10T14:47:05Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T17:28:24.835649Z"}],"ghsa":[{"id":"GHSA-jxhj-wr2q-m255","title":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An...","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T21:31:56Z","modified":"2026-09-09T21:32:03Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:11:40.819612Z"}],"nvd":[{"id":"CVE-2026-61915","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T20:18:36.943Z","modified":"2026-09-16T15:23:51.873Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:12:45.93749Z"}],"osv":[{"id":"CVE-2026-61915","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T00:00:00Z","modified":"2026-10-28T02:31:10.334386093Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:45:12.933503Z"},{"id":"DEBIAN-CVE-2026-61915","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T20:18:36.943Z","modified":"2026-10-01T03:03:13.576435033Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"UBUNTU-CVE-2026-61915","description":"An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION=\"BYPARAM@...\" against a resource with two or more properties of the matched kind. The memory holding the selector would be freed once on each iteration over the properties.","status":"published","published":"2026-09-09T14:00:00Z","modified":"2026-10-17T12:59:15.212973362Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:43.630667Z"},{"id":"CLSA-2026-1790173408","title":"cyrus-imapd: Fix of 3 CVEs","description":"- fix CVE-2026-61915: double-free in the CalDAV VPATCH BYPARAM selector\n- fix CVE-2026-61909: calendar/addressbook-multiget returned resources the user has no ACL on\n- fix CVE-2026-61911: Sieve mailboxexists/metadata probed other users' mailboxes without a lookup-rights check\n- do not free VPATCH parameters already removed by reference: libical frees them in icalproperty_remove_parameter_by_ref(), so the following icalparameter_free() aborted the CalDAV worker on any VPATCH carrying a PATCH-ACTION parameter, before the CVE-2026-61915 code path could be reached\n- add the upstream cunit regression test for CVE-2026-61915\n- run the cunit suite in %check even when cassandane is disabled, so the regression test above actually executes","status":"published","published":"2026-09-23T14:23:39Z","modified":"2026-10-26T09:43:36.723242991Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790252040","title":"cyrus-imapd: Fix of CVE-2026-61915","description":"- fix CVE-2026-61915: double-free in the CalDAV VPATCH BYPARAM selector, reachable by an authenticated calendar user patching a resource with two or more properties of the matched kind\n- disable the cassandane test runner by default: its harness (imaptest plus the perl test modules) is absent from the el8 repositories on every architecture, and where it does resolve the suite times out in the build chroot; the cunit suite continues to run on all architectures\n- do not free VPATCH parameters already removed by reference: libical frees them in icalproperty_remove_parameter_by_ref(), so the following icalparameter_free() aborted the CalDAV worker on any VPATCH carrying a PATCH-ACTION parameter, before the CVE-2026-61915 code path could be reached","status":"published","published":"2026-09-24T12:14:09Z","modified":"2026-10-26T09:31:51.525955209Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790758129","title":"cyrus-imapd: Fix of CVE-2026-61915","description":"- fix CVE-2026-61915: double-free in the CalDAV VPATCH BYPARAM selector,\n  reachable by an authenticated calendar user patching a resource with two or\n  more properties of the matched kind\n- do not free VPATCH parameters already removed by reference: the parameter\n  stays owned by libical after icalproperty_remove_parameter_by_ref(), so the\n  following icalparameter_free() double-freed it and aborted the CalDAV worker\n  on any VPATCH carrying a PATCH-ACTION parameter\n- use strcmpsafe/strncmpsafe for PATCHACTION string matching:\n  icalparameter_get_xvalue() and icalproperty_get_value_as_string() may return\n  NULL on the same VPATCH path\n- disable the cassandane test runner by default: on i686 its noarch perl\n  dependencies are absent from the i686 mirror of centos8.4-Devel, and on x86_64\n  the prebuilt imaptest helper dies on SIGBUS (769 run, 0 failures, 64 errors,\n  all the same crash); the cunit suite continues to run on both architectures","status":"published","published":"2026-09-30T08:49:00Z","modified":"2026-10-26T09:31:43.917100989Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790764098","title":"cyrus-imapd: Fix of CVE-2026-61915","description":"- use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching:\n  icalproperty_get_value_as_string() returns NULL for a property parsed with an\n  empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the\n  httpd worker on the same authenticated CalDAV path as CVE-2026-61915","status":"published","published":"2026-09-30T10:28:26Z","modified":"2026-10-26T09:31:36.031109945Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790764490","title":"cyrus-imapd: Fix of CVE-2026-61915","description":"- use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching:\n  icalproperty_get_value_as_string() returns NULL for a property parsed with an\n  empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the\n  httpd worker on the same authenticated CalDAV path as CVE-2026-61915","status":"published","published":"2026-09-30T10:34:59Z","modified":"2026-10-26T09:31:51.716834103Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790769478","title":"cyrus-imapd: Fix of CVE-2026-61915","description":"- fix CVE-2026-61915: double-free in the CalDAV VPATCH BYPARAM selector,\n  reachable by an authenticated calendar user patching a resource with two or\n  more properties of the matched kind\n- disable the cassandane test runner by default: its harness (imaptest plus the\n  perl test modules) is absent from the centos-stream8 repositories on every\n  architecture; the cunit suite continues to run on all architectures\n- do not free VPATCH parameters already removed by reference: the parameter\n  stays owned by libical after icalproperty_remove_parameter_by_ref(), so the\n  following icalparameter_free() double-freed it and aborted the CalDAV worker\n  on any VPATCH carrying a PATCH-ACTION parameter, before the CVE-2026-61915\n  code path could be reached\n- use strcmpsafe/strncmpsafe for PATCHACTION string matching:\n  icalparameter_get_xvalue() and icalproperty_get_value_as_string() may return\n  NULL on the same VPATCH path","status":"published","published":"2026-09-30T11:58:08Z","modified":"2026-10-26T09:30:56.554912895Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790963865","title":"cyrus-imapd: Fix of CVE-2026-61915","description":"- fix CVE-2026-61915: double-free in the CalDAV VPATCH BYPARAM selector\n- do not free VPATCH parameters already removed by reference, which\n  aborted the CalDAV worker before the CVE-2026-61915 path was reached\n- add the upstream cunit regression test for CVE-2026-61915","status":"published","published":"2026-10-02T17:57:57Z","modified":"2026-10-26T09:30:51.955281629Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791997969","title":"Fix CVE(s): CVE-2026-61915","description":"   * SECURITY UPDATE: Double free in CalDAV VPATCH BYPARAM handling\n     - debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION\n       parameter already freed by icalproperty_remove_parameter_by_ref()\n     - debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once\n       after the property loop in apply_property_updates()\n     - CVE-2026-61915","status":"published","published":"2026-10-14T17:13:00Z","modified":"2026-10-26T09:32:05.733046626Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792568971","title":"Fix CVE(s): CVE-2026-61915","description":"   * SECURITY UPDATE: double free in CalDAV VPATCH BYPARAM handling\n     - debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION\n       parameter already freed by icalproperty_remove_parameter_by_ref()\n     - debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once\n       after the property loop in apply_property_updates()\n     - CVE-2026-61915","status":"published","published":"2026-10-21T07:49:42Z","modified":"2026-10-26T09:31:53.177080013Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"openSUSE-SU-2026:21929-1","title":"Security update for cyrus-imapd","description":"This update for cyrus-imapd fixes the following issues:\n\nChanges in cyrus-imapd:\n\nUpdate to 3.8.8 (bugfix release):\n\n- CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL (bsc#1279908)\n- CVE-2026-61908: JMAP email-header blob ID out-of-bounds index (bsc#1279975)\n- CVE-2026-61909: CalDAV/CardDAV multiget bypasses per-href ACL (bsc#1279976)\n- CVE-2026-61910: Mailbox/set let sharee change special-use role on shared mailboxes (bsc#1279977)\n- CVE-2026-61911: Sieve mailbox existence oracle (bsc#1279978)\n- CVE-2026-61915: VPATCH BYPARAM double-free (bsc#1279979)\n","status":"published","published":"2026-09-22T15:42:33Z","modified":"2026-09-25T18:23:14.142636484Z","updated_at":"2026-11-02T16:58:42.426393Z"}]}}