Summary
The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.
Security Fix(es):
* postfix: SMTP smuggling vulnerability (CVE-2023-51764)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | postfix | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-cdb | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-ldap | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-lmdb | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-mysql | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-pcre | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-perl-scripts | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-pgsql | 2:3.5.25-1.el9 |
| AlmaLinux · 9 | postfix-sqlite | 2:3.5.25-1.el9 |
Vulnerabilities 1
-
Unscored —CVE-2023-51764 Public exploit
Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and…