Summary
The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.
Security Fix(es):
* postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 10 | postfix | 2:3.8.5-10.el10_2 |
Vulnerabilities 1
-
Low 3.7
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash …
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2466488