Most recent entries from all

ALSA-2026:25930 — Important: postfix security update

Affected: AlmaLinux:10: postfix, AlmaLinux:10: postfix-cdb, AlmaLinux:10: postfix-ldap, AlmaLinux:10: postfix-lmdb, AlmaLinux:10: postfix-mysql, AlmaLinux:10: postfix-pcre, AlmaLinux:10: postfix-perl-scripts, AlmaLinux:10: postfix-pgsql, AlmaLinux:10: postfix-sqlite

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.

Security Fix(es):

* postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-09784

certfr-2026-avi-0986 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-0986

EUVD-2026-356623

fkie_cve-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

GHSA-c4gx-p7gq-g6hp

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

msrc_CVE-2026-43964 — Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…

msrc_CVE-2026-43964

OESA-2026-2209 — postfix security update

Affected: openEuler:24.03-LTS: postfix

Postfix is a Mail Transport Agent (MTA). Security Fix(es):

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.(CVE-2026-43964)

openSUSE-SU-2026:10707-1 — postfix-3.11.2-1.1 on GA media

postfix-3.11.2-1.1 on GA media

RHSA-2026:50963 — Red Hat Security Advisory: postfix security update

postfix: buffer over-read via malformed enhanced status code

RLSA-2026:25930 — Important: postfix security update

Affected: Rocky Linux:10: postfix

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.

Security Fix(es):

* postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:22335-1 — Security update for postfix

Security update for postfix

UBUNTU-CVE-2026-43964

Affected: Ubuntu:Pro:14.04:LTS: postfix, Ubuntu:Pro:16.04:LTS: postfix, Ubuntu:Pro:18.04:LTS: postfix, Ubuntu:Pro:20.04:LTS: postfix, Ubuntu:22.04:LTS: postfix, Ubuntu:24.04:LTS: postfix, Ubuntu:25.10: postfix, Ubuntu:26.04:LTS: postfix

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

WID-SEC-W-2026-1352 — Postfix: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Postfix ausnutzen, um einen Denial of Service Angriff durchzuführen.