Summary
The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.
Security Fix(es):
* postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | postfix | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-cdb | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-ldap | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-lmdb | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-mysql | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-pcre | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-perl-scripts | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-pgsql | 2:3.5.25-3.el9_8 |
| AlmaLinux · 9 | postfix-sqlite | 2:3.5.25-3.el9_8 |
Vulnerabilities 1
-
Low 3.7
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash …