Skip to content
OpenAdvisories
Unscored RHSA-2011:0422 2 CVEs

Red Hat Security Advisory: postfix security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 15

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as postfix 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::as postfix-debuginfo 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::as postfix-pflogsumm 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop postfix 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop postfix-debuginfo 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop postfix-pflogsumm 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::es postfix 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::es postfix-debuginfo 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::es postfix-pflogsumm 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws postfix 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws postfix-debuginfo 2:2.2.10-1.4.el4
Red Hat · RHEL 4 enterprise_linux:4::ws postfix-pflogsumm 2:2.2.10-1.4.el4
Red Hat · RHEL 5 enterprise_linux:5::server postfix 2:2.3.3-2.2.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server postfix-debuginfo 2:2.3.3-2.2.el5_6
Red Hat · RHEL 5 enterprise_linux:5::server postfix-pflogsumm 2:2.3.3-2.2.el5_6

Vulnerabilities 2

  • Unscored —

    Postfix 2.5 before 2.5.4 and 2.6 before 2.6-20080814 delivers to a mailbox file even when this file is not owned by the…

  • Unscored —
    CVE-2011-0411 EPSS 16%

    The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=456347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=674814
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0422.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2937
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2937
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2937
  • report
    https://access.redhat.com/security/cve/CVE-2011-0411
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0411
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0411