{"id":"CLSA-2026-1791997969","summary":"Fix CVE(s): CVE-2026-61915","details":"   * SECURITY UPDATE: Double free in CalDAV VPATCH BYPARAM handling\n     - debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION\n       parameter already freed by icalproperty_remove_parameter_by_ref()\n     - debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once\n       after the property loop in apply_property_updates()\n     - CVE-2026-61915","modified":"2026-10-26T09:32:05.733046626Z","published":"2026-10-14T17:13:00Z","upstream":["CVE-2026-61915"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1791997969.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61915"}],"affected":[{"package":{"name":"cyrus-admin","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-admin?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-caldav","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-caldav?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-clients","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-clients?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-imapd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-imapd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-murder","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-murder?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-nntpd","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-nntpd?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-pop3d","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-pop3d?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"cyrus-replication","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/cyrus-replication?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}},{"package":{"name":"libcyrus-imap-perl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libcyrus-imap-perl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-5+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791997969.json"}}],"schema_version":"1.9.0"}