# cyrus-imapd security updates

Patch Radar has 56 security fixes for cyrus-imapd, closing 22 CVEs. The newest security fix is OPENSUSE-SU-2026:21929-1 (3.8.8-bp160.1.1), released September 22, 2026.

- Web page: https://patchblox.com/security/product/linux/cyrus-imapd
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [OPENSUSE-SU-2026:21929-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21929-1.md) | Sep 22, 2026 | opensuse-leap 16.0 3.8.8-bp160.1.1 | High | 6 | 0 |
| [DEBIAN-CVE-2026-61915](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61915.md) | Sep 17, 2026 | Debian 14 3.12.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-61908](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61908.md) | Sep 17, 2026 | Debian 14 3.12.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-61911](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61911.md) | Sep 17, 2026 | Debian 14 3.12.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-61907](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61907.md) | Sep 17, 2026 | Debian 14 3.12.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-61909](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61909.md) | Sep 17, 2026 | Debian 14 3.12.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-61910](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61910.md) | Sep 17, 2026 | Debian 14 3.12.4-1 | Routine | 1 | 0 |
| [FEDORA-2026-97A7EC5786](https://patchblox.com/security/data/fix/linux/fedora-2026-97a7ec5786.md) | Sep 14, 2026 | Fedora 43 3.10.4-1.fc43 | High | 15 | 0 |
| [DEBIAN-CVE-2026-47084](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47084.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47084](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47084.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47084](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47084.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47083](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47083.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47083](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47083.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47082](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47082.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47082](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47082.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47082](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47082.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47085](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47085.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47085](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47085.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47085](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47085.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47087](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47087.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47087](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47087.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47087](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47087.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47089](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47089.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47089](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47089.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47089](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47089.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47086](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47086.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47086](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47086.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47086](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47086.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47088](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47088.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47088](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47088.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47088](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47088.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47081](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47081.md) | Jul 22, 2026 | Debian 14 3.12.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47081](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47081.md) | Jul 22, 2026 | Debian 12.15 (bookworm) 3.6.1-4+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-47081](https://patchblox.com/security/data/fix/linux/debian-cve-2026-47081.md) | Jul 22, 2026 | Debian 13.5 (trixie) 3.10.2-1+deb13u2 | Routine | 1 | 0 |
| [OPENSUSE-SU-2026:21368-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21368-1.md) | Jul 17, 2026 | opensuse-leap 16.0 3.8.7-bp160.1.1 | Routine | 9 | 0 |
| [OPENSUSE-SU-2026:20962-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20962-1.md) | Jun 12, 2026 | opensuse-leap 16.0 3.8.6-bp160.1.1 | High | 2 | 0 |
| [cyrus-imapd 3.0.12-1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-cyrus-imapd-3.0.12-1.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 3.0.12-1 | High | 1 | 0 |
| [RLSA-2024:9195](https://patchblox.com/security/data/fix/linux/rlsa-2024-9195.md) | Mar 17, 2025 | rocky 9 0:3.4.8-1.el9 | Routine | 1 | 0 |
| [ELSA-2024-9195](https://patchblox.com/security/data/fix/linux/elsa-2024-9195.md) | Nov 14, 2024 | ol 9 0:3.4.8-1.el9 | Routine | 1 | 0 |
| [ALSA-2024:9195](https://patchblox.com/security/data/fix/linux/alsa-2024-9195.md) | Nov 12, 2024 | almalinux 9 3.4.8-1.el9 | Routine | 1 | 0 |
| [RHSA-2024:9195](https://patchblox.com/security/data/fix/linux/rhsa-2024-9195.md) | Nov 12, 2024 | RHEL 9 0:3.4.8-1.el9 | Routine | 1 | 0 |
| [DSA-5708-1](https://patchblox.com/security/data/fix/linux/dsa-5708-1.md) | Jun 11, 2024 | Debian 12.15 (bookworm) 3.6.1-4+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-34055](https://patchblox.com/security/data/fix/linux/debian-cve-2024-34055.md) | Jun 5, 2024 | Debian 13.5 (trixie) 3.8.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-34055](https://patchblox.com/security/data/fix/linux/debian-cve-2024-34055.md) | Jun 5, 2024 | Debian 14 3.8.3-1 | Routine | 1 | 0 |
| [cyrus-imapd 3.4.3-3ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-cyrus-imapd-3.4.3-3ubuntu0.1-esm1.md) | Jun 4, 2024 | Ubuntu 22.04.1 LTS (jammy) 3.4.3-3ubuntu0.1+esm1 | Routine | 1 | 0 |
| [cyrus-imapd 3.8.2-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-cyrus-imapd-3.8.2-1ubuntu0.1-esm1.md) | Jun 4, 2024 | Ubuntu 24.04.5 LTS (noble) 3.8.2-1ubuntu0.1~esm1 | Routine | 1 | 0 |
| [ELSA-2021-3492](https://patchblox.com/security/data/fix/linux/elsa-2021-3492.md) | Sep 13, 2021 | ol 8 0:3.0.7-20.el8_4.1 | High | 1 | 0 |
| [RHSA-2021:3492](https://patchblox.com/security/data/fix/linux/rhsa-2021-3492.md) | Sep 13, 2021 | RHEL 8 0:3.0.7-20.el8_4.1 | High | 1 | 0 |
| [cyrus-imapd 2.5.10-3ubuntu1.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cyrus-imapd-2.5.10-3ubuntu1.1-esm1.md) | Aug 31, 2021 | Ubuntu 18.04.6 LTS (bionic) 2.5.10-3ubuntu1.1+esm1 | High | 2 | 0 |
| [cyrus-imapd 3.0.13-5ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-cyrus-imapd-3.0.13-5ubuntu0.1-esm1.md) | Aug 31, 2021 | Ubuntu 20.04 LTS (focal) 3.0.13-5ubuntu0.1~esm1 | High | 1 | 0 |
| [ELSA-2020-4655](https://patchblox.com/security/data/fix/linux/elsa-2020-4655.md) | Nov 10, 2020 | ol 8 0:3.0.7-19.el8 | High | 2 | 0 |
| [RHSA-2020:4655](https://patchblox.com/security/data/fix/linux/rhsa-2020-4655.md) | Nov 4, 2020 | RHEL 8 0:3.0.7-19.el8 | High | 2 | 0 |
| [cyrus-imapd 2.5.10-3ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-cyrus-imapd-2.5.10-3ubuntu1.1.md) | Dec 16, 2019 | Ubuntu 18.04.6 LTS (bionic) 2.5.10-3ubuntu1.1 | High | 2 | 0 |
| [cyrus-imapd 3.0.12-1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-cyrus-imapd-3.0.12-1.md) | Nov 14, 2019 | Ubuntu 20.04 LTS (focal) 3.0.12-1 | High | 1 | 0 |
| [ELSA-2019-1771](https://patchblox.com/security/data/fix/linux/elsa-2019-1771.md) | Jul 30, 2019 | ol 8 0:3.0.7-15.el8_0.1 | High | 1 | 0 |
| [RHSA-2019:1771](https://patchblox.com/security/data/fix/linux/rhsa-2019-1771.md) | Jul 15, 2019 | RHEL 8 0:3.0.7-15.el8_0.1 | High | 1 | 0 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.