Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data containing a parameterized property, the function passes icalparameter_compare_kind_map() to bsearch() through an incompatible comparator function pointer type. bsearch() invokes the callback through the mismatched type, resulting in undefined behavior and process termination, leading to denial of service.
The fix [1] is not released yet. Nonetheless Fedora is still in the 3.x series, not 4.x series (it's awaiting approval), thus, as it is in the time of writing this comment, the Fedora is unaffected by it. [1] https://github.com/libical/libical/issues/1361
(In reply to Milan Crha from comment #1) > Nonetheless Fedora is still in the 3.x series, not 4.x series (it's awaiting approval), > thus, as it is in the time of writing this comment, the Fedora is unaffected by it. Ehm, or not, I just checked and the 3.x series has the same code.
FEDORA-2026-9616ace61b (libical-3.0.20-10.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-9616ace61b
FEDORA-2026-a76bba1412 (libical-3.0.20-8.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-a76bba1412
FEDORA-2026-d4c8dad1fd (libical-3.0.20-5.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-d4c8dad1fd
FEDORA-2026-9616ace61b has been pushed to the Fedora 45 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-9616ace61b` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-9616ace61b See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-a76bba1412 has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-a76bba1412` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-a76bba1412 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2026-d4c8dad1fd has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-d4c8dad1fd` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-d4c8dad1fd See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.