Linux
cyrus-imapd security updates
Patch Radar has 56 security fixes for cyrus-imapd, closing 22 CVEs. The newest security fix is OPENSUSE-SU-2026:21929-1 (3.8.8-bp160.1.1), released September 22, 2026.
Latest version
n/a
Release date not known
Security fixes
56
On record in Patch Radar
CVEs
22
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | OPENSUSE-SU-2026:21929-1 | opensuse-leap 16.0 | 3.8.8-bp160.1.1 | 6 | Sep 22, 2026 | |
| High | DEBIAN-CVE-2026-61915 | Debian 14 | 3.12.4-1 | 1 | Sep 17, 2026 | |
| Routine | DEBIAN-CVE-2026-61908 | Debian 14 | 3.12.4-1 | 1 | Sep 17, 2026 | |
| Routine | DEBIAN-CVE-2026-61911 | Debian 14 | 3.12.4-1 | 1 | Sep 17, 2026 | |
| Routine | DEBIAN-CVE-2026-61907 | Debian 14 | 3.12.4-1 | 1 | Sep 17, 2026 | |
| Routine | DEBIAN-CVE-2026-61909 | Debian 14 | 3.12.4-1 | 1 | Sep 17, 2026 | |
| Routine | DEBIAN-CVE-2026-61910 | Debian 14 | 3.12.4-1 | 1 | Sep 17, 2026 | |
| High | FEDORA-2026-97A7EC5786 | Fedora 43 | 3.10.4-1.fc43 | 15 | Sep 14, 2026 | |
| Routine | DEBIAN-CVE-2026-47084 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47084 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47084 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47083 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47083 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47082 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47082 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47082 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47085 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47085 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47085 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47087 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47087 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47087 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47089 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47089 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47089 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47086 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47086 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47086 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47088 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47088 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47088 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47081 | Debian 14 | 3.12.3-1 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47081 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u5 | 1 | Jul 22, 2026 | |
| Routine | DEBIAN-CVE-2026-47081 | Debian 13.5 (trixie) | 3.10.2-1+deb13u2 | 1 | Jul 22, 2026 | |
| Routine | OPENSUSE-SU-2026:21368-1 | opensuse-leap 16.0 | 3.8.7-bp160.1.1 | 9 | Jul 17, 2026 | |
| High | OPENSUSE-SU-2026:20962-1 | opensuse-leap 16.0 | 3.8.6-bp160.1.1 | 2 | Jun 12, 2026 | |
| High | cyrus-imapd 3.0.12-1 | Ubuntu 24.10 (oracular) | 3.0.12-1 | 1 | Jan 16, 2026 | |
| Routine | RLSA-2024:9195 | rocky 9 | 0:3.4.8-1.el9 | 1 | Mar 17, 2025 | |
| Routine | ELSA-2024-9195 | ol 9 | 0:3.4.8-1.el9 | 1 | Nov 14, 2024 | |
| Routine | ALSA-2024:9195 | almalinux 9 | 3.4.8-1.el9 | 1 | Nov 12, 2024 | |
| Routine | RHSA-2024:9195 | RHEL 9 | 0:3.4.8-1.el9 | 1 | Nov 12, 2024 | |
| Routine | DSA-5708-1 | Debian 12.15 (bookworm) | 3.6.1-4+deb12u2 | 1 | Jun 11, 2024 | |
| Routine | DEBIAN-CVE-2024-34055 | Debian 13.5 (trixie) | 3.8.3-1 | 1 | Jun 5, 2024 | |
| Routine | DEBIAN-CVE-2024-34055 | Debian 14 | 3.8.3-1 | 1 | Jun 5, 2024 | |
| Routine | cyrus-imapd 3.4.3-3ubuntu0.1+esm1 | Ubuntu 22.04.1 LTS (jammy) | 3.4.3-3ubuntu0.1+esm1 | 1 | Jun 4, 2024 | |
| Routine | cyrus-imapd 3.8.2-1ubuntu0.1~esm1 | Ubuntu 24.04.5 LTS (noble) | 3.8.2-1ubuntu0.1~esm1 | 1 | Jun 4, 2024 | |
| High | ELSA-2021-3492 | ol 8 | 0:3.0.7-20.el8_4.1 | 1 | Sep 13, 2021 | |
| High | RHSA-2021:3492 | RHEL 8 | 0:3.0.7-20.el8_4.1 | 1 | Sep 13, 2021 | |
| High | cyrus-imapd 2.5.10-3ubuntu1.1+esm1 | Ubuntu 18.04.6 LTS (bionic) | 2.5.10-3ubuntu1.1+esm1 | 2 | Aug 31, 2021 | |
| High | cyrus-imapd 3.0.13-5ubuntu0.1~esm1 | Ubuntu 20.04 LTS (focal) | 3.0.13-5ubuntu0.1~esm1 | 1 | Aug 31, 2021 | |
| High | ELSA-2020-4655 | ol 8 | 0:3.0.7-19.el8 | 2 | Nov 10, 2020 | |
| High | RHSA-2020:4655 | RHEL 8 | 0:3.0.7-19.el8 | 2 | Nov 4, 2020 | |
| High | cyrus-imapd 2.5.10-3ubuntu1.1 | Ubuntu 18.04.6 LTS (bionic) | 2.5.10-3ubuntu1.1 | 2 | Dec 16, 2019 | |
| High | cyrus-imapd 3.0.12-1 | Ubuntu 20.04 LTS (focal) | 3.0.12-1 | 1 | Nov 14, 2019 | |
| High | ELSA-2019-1771 | ol 8 | 0:3.0.7-15.el8_0.1 | 1 | Jul 30, 2019 | |
| High | RHSA-2019:1771 | RHEL 8 | 0:3.0.7-15.el8_0.1 | 1 | Jul 15, 2019 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.