{"id":"MGASA-2026-0553","summary":"Updated libical package fixes security vulnerabilities","details":"Denial of Service via crafted iCalendar property parsing.\n(CVE-2026-88383)\nHeap Out-of-Bounds Read via icalvalue_decode_ical_string.\n(CVE-2026-111269)\n","modified":"2026-10-27T04:58:07.444835089Z","published":"2026-10-27T04:31:25Z","upstream":["CVE-2026-111269","CVE-2026-88383"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0553.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36475"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IS2XULHAXRU4HV4TBL2ALZSHAFHMXM5Y/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540947"},{"type":"REPORT","url":"https://github.com/libical/libical/issues/1361"}],"affected":[{"package":{"name":"libical","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/libical?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.20-2.1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0553.json"}}],"schema_version":"1.9.2","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}