https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:04:04.816504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-57933 EUVD-2026-57933 2026-10-06T22:04:04.820738+00:00 EUVD-2026-57933 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16791 fkie_cve-2019-16791 2026-10-06T22:04:04.820779+00:00

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

 https://cve.radiocsirt.org/vuln/ghsa-h92m-42h4-82f6 GHSA-h92m-42h4-82f6 — postfix-mta-sts-resolver Algorithm Downgrade vulnerability 2026-10-06T22:04:04.820822+00:00

Affected: PyPI: postfix-mta-sts-resolver

## Incorrect query parsing

### Impact All users of versions prior to 0.5.1 can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

### Patches Problem has been patched in version 0.5.1

### Workarounds Users may remediate this vulnerability without upgrading by applying [these patches](https://gist.github.com/Snawoot/b9da85d6b26dea5460673b29df1adc6b) to older suppoorted versions.

### For more information If you have any questions or comments about this advisory: * Open an issue in [postfix-mta-sts-resolver repo](https://github.com/Snawoot/postfix-mta-sts-resolver) * Email me at [vladislav at vm-0 dot com](mailto:vladislav-ex-gh-advisory@vm-0.com)

 https://cve.radiocsirt.org/vuln/gsd-2019-16791 gsd-2019-16791 2026-10-06T22:04:04.820868+00:00 gsd-2019-16791 https://cve.radiocsirt.org/vuln/pysec-2020-174 PYSEC-2020-174 2026-10-06T22:04:04.820890+00:00

Affected: PyPI: postfix-mta-sts-resolver

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-16791 UBUNTU-CVE-2019-16791 2026-10-06T22:04:04.820920+00:00

Affected: Ubuntu:20.04:LTS: postfix-mta-sts-resolver, Ubuntu:22.04:LTS: postfix-mta-sts-resolver, Ubuntu:24.04:LTS: postfix-mta-sts-resolver, Ubuntu:25.10: postfix-mta-sts-resolver, Ubuntu:26.04:LTS: postfix-mta-sts-resolver

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.