High ELSA-2026-25930 1 CVE

Important: postfix security update (Oracle Linux 10)

Published Jul 16, 2026 · Updated Jul 16, 2026

Ecosystem: Oracle Linux

Summary

[2:3.8.5-10]
- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
Resolves: RHEL-176554

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 10	postfix	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-cdb	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-ldap	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-lmdb	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-mysql	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-pcre	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-perl-scripts	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-pgsql	2:3.8.5-10.el10_2
Oracle Linux · 10	postfix-sqlite	2:3.8.5-10.el10_2

Vulnerabilities 1

Low 3.7

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash …

Postfix Postfix postfix postfix Debian Ubuntu Azure Linux

May 4, 2026