CLSA-2026-1790764098

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790764098
Upstream
Published
2026-09-30T10:28:26Z
Modified
2026-10-26T09:31:36Z
Summary
cyrus-imapd: Fix of CVE-2026-61915
Details
  • use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching: icalproperty_get_value_as_string() returns NULL for a property parsed with an empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the httpd worker on the same authenticated CalDAV path as CVE-2026-61915
References

Affected packages

TuxCare:AlmaLinux:9.6
cyrus-imapd

Package

Name
cyrus-imapd
Purl
pkg:rpm/tuxcare/cyrus-imapd?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"
cyrus-imapd-devel

Package

Name
cyrus-imapd-devel
Purl
pkg:rpm/tuxcare/cyrus-imapd-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"
cyrus-imapd-doc-extra

Package

Name
cyrus-imapd-doc-extra
Purl
pkg:rpm/tuxcare/cyrus-imapd-doc-extra?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"
cyrus-imapd-libs

Package

Name
cyrus-imapd-libs
Purl
pkg:rpm/tuxcare/cyrus-imapd-libs?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"
cyrus-imapd-utils

Package

Name
cyrus-imapd-utils
Purl
pkg:rpm/tuxcare/cyrus-imapd-utils?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"
cyrus-imapd-virusscan

Package

Name
cyrus-imapd-virusscan
Purl
pkg:rpm/tuxcare/cyrus-imapd-virusscan?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"
perl-Cyrus

Package

Name
perl-Cyrus
Purl
pkg:rpm/tuxcare/perl-Cyrus?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.4.8-2.el9_6.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790764098.json"