Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-43964 EUVD-2026-27115GHSA-c4gx-p7gq-g6hp

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced stat…

Published May 4, 2026 · Updated Aug 20, 2026 · Assigned by mitre

Vendor: Postfix Product: Postfix Package: postfix Package: postfix Package: postfix Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Affected products

VendorProductAffectedFixed
Postfix Postfix 2.3 – < 3.8.16, 3.9 – < 3.9.10, 3.10 – < 3.10.9 3.8.16

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 postfix 3.11.2-1 —
Debian 13 postfix 3.10.10-0+deb13u1 —
Debian 12 postfix No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS postfix 3.10.6-4ubuntu2.1 —
Ubuntu 25.10 postfix 3.10.2-1ubuntu2.1 —
Ubuntu 24.04 LTS postfix 3.8.6-1ubuntu0.1 —
Ubuntu 22.04 LTS postfix 3.6.4-1ubuntu1.4 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS postfix 3.4.13-0ubuntu1.4+esm1 —
Ubuntu Pro 18.04 LTS postfix 3.3.0-1ubuntu0.4+esm4 —
Ubuntu Pro 16.04 LTS postfix 3.1.0-3ubuntu0.4+esm4 —
Ubuntu Pro 14.04 LTS postfix 2.11.0-1ubuntu1.2+esm4 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 postfix +8 2:3.8.5-10.el10_2 RHSA-2026:25930
RHEL 9 postfix +8 2:3.5.25-3.el9_8 RHSA-2026:26205
RHEL 8 postfix +7 2:3.5.8-8.el8_10 RHSA-2026:25932
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS postfix 2:3.8.5-8.el10_0.1 RHSA-2026:51436
RHEL 8.8 TUS postfix 2:3.5.8-4.el8_8.1 RHSA-2026:50964
RHEL 8.8 E4S postfix 2:3.5.8-4.el8_8.1 RHSA-2026:50964
RHEL 8.6 EUS Long Life postfix 2:3.5.8-4.el8_6.1 RHSA-2026:50963
RHEL 8.6 AUS postfix 2:3.5.8-4.el8_6.1 RHSA-2026:50963
RHEL 8.4 EUS Long Life postfix 2:3.5.8-1.el8_4.1 RHSA-2026:51034
RHEL 8.4 AUS postfix 2:3.5.8-1.el8_4.1 RHSA-2026:51034
RHEL 7 ELS postfix 2:2.10.1-9.el7_9.1 RHSA-2026:57174

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 postfix +8 2:3.8.5-10.el10_2 ALSA-2026:25930
AlmaLinux 9 postfix +8 2:3.5.25-3.el9_8 ALSA-2026:26205
AlmaLinux 8 postfix +7 2:3.5.8-8.el8_10 ALSA-2026:25932

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 postfix 2:3.8.5-10.el10_2 RLSA-2026:25930
Rocky Linux 9 postfix 2:3.5.25-3.el9_8 RLSA-2026:26205
Rocky Linux 8 postfix 2:3.5.8-8.el8_10 RLSA-2026:25932

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 postfix +1 3.8.4-150600.3.6.1 SUSE-SU-2026:2781-1
SLES 12 SP5 postfix 3.2.10-3.33.1 SUSE-SU-2026:2780-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 postfix 3.10.2-160000.3.1 SUSE-SU-2026:22335-1
SLES 16.0 postfix 3.10.2-160000.3.1 SUSE-SU-2026:22335-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed postfix 3.11.2-1.1 openSUSE-SU-2026:10707-1
openSUSE Leap 16.0 postfix +1 3.10.2-160000.3.1 openSUSE-SU-2026:21020-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 postfix 3.9.11-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 postfix +8 2:3.8.5-10.el10_2 ELSA-2026-25930
Oracle Linux 9 postfix +8 2:3.5.25-3.el9_8 ELSA-2026-26205
Oracle Linux 8 postfix +7 2:3.5.8-8.el8_10 ELSA-2026-25932
Oracle Linux 7 postfix +2 2:2.10.1-9.0.1.el7 ELSA-2026-57174

Advisories 24

References