Skip to content
OpenAdvisories
Unscored USN-8253-1 0 CVEs

postfix vulnerability

Published May 7, 2026 · Updated Jun 30, 2026

Summary

Kamil Frankowicz discovered that Postfix incorrectly handled certain
enhanced status codes. A remote attacker could possibly use this issue to
cause Postfix to crash, resulting in a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS postfix 3.6.4-1ubuntu1.4
Ubuntu · 24.04 LTS 24.04:LTS postfix 3.8.6-1ubuntu0.1
Ubuntu · 25.10 postfix 3.10.2-1ubuntu2.1
Ubuntu · 26.04 LTS 26.04:LTS postfix 3.10.6-4ubuntu2.1

References

  • report
    https://ubuntu.com/security/CVE-2026-43964