High ELSA-2026-25932 1 CVE

Important: postfix security update (Oracle Linux 8)

Published Jun 16, 2026 · Updated Jun 16, 2026

Ecosystem: Oracle Linux

Summary

[2:3.5.8-8]
- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
Resolves: RHEL-176548

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 8	postfix	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-cdb	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-ldap	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-mysql	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-pcre	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-perl-scripts	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-pgsql	2:3.5.8-8.el8_10
Oracle Linux · 8	postfix-sqlite	2:3.5.8-8.el8_10

Vulnerabilities 1

Low 3.7

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash …

Postfix Postfix postfix postfix Debian Ubuntu Azure Linux

May 4, 2026