High ELSA-2026-57174 1 CVE

Important: postfix security update (Oracle Linux 7)

Published Oct 26, 2026 · Updated Oct 26, 2026

Ecosystem: Oracle Linux

Summary

[2:2.10.1-9.0.1]
- Fix CVE-2026-43964 buffer over-read [Orabug: 39905988]
- Allow build on Linux 5.x kernels [Orabug: 39905988]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	postfix	2:2.10.1-9.0.1.el7
Oracle Linux · 7	postfix-perl-scripts	2:2.10.1-9.0.1.el7
Oracle Linux · 7	postfix-sysvinit	2:2.10.1-9.0.1.el7

Vulnerabilities 1

Low 3.7

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash …

Postfix Postfix postfix postfix Debian Ubuntu Azure Linux

May 4, 2026