CLSA-2026-1790764490
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790764490.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1790764490
- Upstream
- Published
- 2026-09-30T10:34:59Z
- Modified
- 2026-10-26T09:31:51Z
- Summary
- cyrus-imapd: Fix of CVE-2026-61915
- Details
-
- use strcmpsafe/strncmpsafe for VPATCH PATCHACTION string matching: icalproperty_get_value_as_string() returns NULL for a property parsed with an empty value, so a VPATCH carrying 'SUMMARY;PATCH-ACTION=BYVALUE:' crashed the httpd worker on the same authenticated CalDAV path as CVE-2026-61915
- References
Affected packages
TuxCare:CentOS:8.5 / cyrus-imapd
Package
- Name
- cyrus-imapd
- Purl
- pkg:rpm/tuxcare/cyrus-imapd?distro=centos-8.5
TuxCare:CentOS:8.5 / cyrus-imapd-devel
Package
- Name
- cyrus-imapd-devel
- Purl
- pkg:rpm/tuxcare/cyrus-imapd-devel?distro=centos-8.5
TuxCare:CentOS:8.5 / cyrus-imapd-doc-extra
Package
- Name
- cyrus-imapd-doc-extra
- Purl
- pkg:rpm/tuxcare/cyrus-imapd-doc-extra?distro=centos-8.5
TuxCare:CentOS:8.5 / cyrus-imapd-utils
Package
- Name
- cyrus-imapd-utils
- Purl
- pkg:rpm/tuxcare/cyrus-imapd-utils?distro=centos-8.5