{"id":"CLSA-2026-1792568971","summary":"Fix CVE(s): CVE-2026-61915","details":"   * SECURITY UPDATE: double free in CalDAV VPATCH BYPARAM handling\n     - debian/patches/CVE-2026-61915-pre.patch: do not free the PATCH-ACTION\n       parameter already freed by icalproperty_remove_parameter_by_ref()\n     - debian/patches/CVE-2026-61915.patch: free the BYPARAM selector once\n       after the property loop in apply_property_updates()\n     - CVE-2026-61915","modified":"2026-10-26T09:31:53.177080013Z","published":"2026-10-21T07:49:42Z","upstream":["CVE-2026-61915"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792568971.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61915"}],"affected":[{"package":{"name":"cyrus-admin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-admin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-caldav","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-caldav?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-clients","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-clients?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-imapd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-imapd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-murder","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-murder?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-nntpd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-nntpd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-pop3d","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-pop3d?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"cyrus-replication","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/cyrus-replication?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}},{"package":{"name":"libcyrus-imap-perl","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libcyrus-imap-perl?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-6+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792568971.json"}}],"schema_version":"1.9.0"}