[Git][security-tracker-team/security-tracker][master] Track fixes for cyrus-imapd via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b544ddc2 by Salvatore Bonaccorso at 2026-09-11T21:37:00+02:00
Track fixes for cyrus-imapd via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1296,23 +1296,23 @@ CVE-2026-71612 (Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b1
 CVE-2026-67593 (A remote attacker can craft an Openwire RemoveSubscriptionInfo command ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-61915 (An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH ...)
-	- cyrus-imapd <unfixed>
+	- cyrus-imapd 3.12.4-1
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html
 CVE-2026-61911 (An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve  ...)
-	- cyrus-imapd <unfixed>
+	- cyrus-imapd 3.12.4-1
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html
 CVE-2026-61910 (An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a ...)
-	- cyrus-imapd <unfixed>
+	- cyrus-imapd 3.12.4-1
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html
 CVE-2026-61909 (An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV mu ...)
-	- cyrus-imapd <unfixed>
+	- cyrus-imapd 3.12.4-1
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html
 CVE-2026-61908 (An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-head ...)
-	- cyrus-imapd <unfixed>
+	- cyrus-imapd 3.12.4-1
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html
 CVE-2026-57967 (An unauthenticated remote attacker can craft a CORE protocol SESSION_R ...)
@@ -1772,7 +1772,7 @@ CVE-2026-65181 (Insufficient authorization of Data Source tables in Impala 2.7-4
 CVE-2026-64857 (tirreno, a security framework, has a session fixation issue in version ...)
 	NOT-FOR-US: tirreno
 CVE-2026-61907 (An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypas ...)
-	- cyrus-imapd <unfixed>
+	- cyrus-imapd 3.12.4-1
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.12/x/3.12.4.html
 	NOTE: https://www.cyrusimap.org/3.12/imap/download/release-notes/3.10/x/3.10.4.html
 CVE-2026-57866 (Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b544ddc2007b28bc77e18e1ac4252b4227f4ac69

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b544ddc2007b28bc77e18e1ac4252b4227f4ac69
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/8cf6c943/attachment-0001.htm>