[Git][security-tracker-team/security-tracker][master] Track proposed update for cyrus-imapd via trixie-pu

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c9256588 by Salvatore Bonaccorso at 2026-08-02T19:32:48+02:00
Track proposed update for cyrus-imapd via trixie-pu

- - - - -


3 changed files:

- data/CVE/list
- data/dsa-needed.txt
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -16630,30 +16630,39 @@ CVE-2026-47751 (Claude Code Action is a general-purpose GitHub action that runs
 	NOT-FOR-US: Claude
 CVE-2026-47089 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. L ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47088 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. T ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47087 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. U ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47086 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. G ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47085 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. U ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47084 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. T ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47083 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. T ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47082 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. T ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-47081 (An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. T ...)
 	- cyrus-imapd 3.12.3-1
+	[trixie] - cyrus-imapd <no-dsa> (Will be fixed via point release)
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.3.html
 CVE-2026-46687 (Emlog is an open source website building system. In 2.6.13 and earlier ...)
 	NOT-FOR-US: Emlog


=====================================
data/dsa-needed.txt
=====================================
@@ -35,8 +35,6 @@ containerd
 --
 cups
 --
-cyrus-imapd
---
 docker.io
 --
 dulwich


=====================================
data/next-point-update.txt
=====================================
@@ -294,3 +294,21 @@ CVE-2026-57965
 	[trixie] - spice-vdagent 0.22.1-4.1+deb13u1
 CVE-2026-57966
 	[trixie] - spice-vdagent 0.22.1-4.1+deb13u1
+CVE-2026-47084
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47086
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47087
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47081
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47089
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47085
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47083
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47088
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2
+CVE-2026-47082
+	[trixie] - cyrus-imapd 3.10.2-1+deb13u2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c92565883a5c750884d0d1f92d454c0fb5785ef7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c92565883a5c750884d0d1f92d454c0fb5785ef7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260802/fb5e3721/attachment-0001.htm>