Security News

Cybersecurity news aggregator

🔄
HIGH Updates Red Hat Errata

RHSA-2026:25932: Important: postfix security update

This vulnerability (CVE-2026-43964, CVSS 3.7) in Postfix is a buffer over-read triggered by a malformed enhanced status code. The affected versions are Postfix 3.8.x prior to 3.8.16, 3.9.x prior to 3.9.10, and 3.10.x prior to 3.10.9. The flaw is remediated by upgrading to Postfix version 3.8.16, 3.9.10, or 3.10.9, respectively.
Read Full Article →

Red Hat Product Errata RHSA-2026:25932 - Security Advisory Issued: 2026-06-15 Updated: 2026-06-15 RHSA-2026:25932 - Security Advisory Overview Updated Packages Synopsis Important: postfix security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for postfix is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS. Security Fix(es): postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2466488 - CVE-2026-43964 postfix: buffer over-read via malformed enhanced status code CVEs CVE-2026-43964 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM postfix-3.5.8-8.el8_10.src.rpm SHA-256: 9a842ef406cf76eff9751c157ccf761a7f5d2084608b3bbc63a638e302ac8bfa x86_64 postfix-3.5.8-8.el8_10.x86_64.rpm SHA-256: 229d01248e395716eef8e931b8996808e92db0cf2f3afc6a32ab59c779c73ad7 postfix-cdb-3.5.8-8.el8_10.x86_64.rpm SHA-256: 66898828d66928d0743dee6d320cb40b071c7e7ec3544e26f1c9f33b98cda7ef postfix-cdb-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 098ba19165c19ee0f9c8e34bed745180ad287bb75cbffd8376c527cfb0f53793 postfix-cdb-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 098ba19165c19ee0f9c8e34bed745180ad287bb75cbffd8376c527cfb0f53793 postfix-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 8763f60a8a2eab92208a5c3e497e51c77fe11095cbc02cd509e1da39a3b1b0dc postfix-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 8763f60a8a2eab92208a5c3e497e51c77fe11095cbc02cd509e1da39a3b1b0dc postfix-debugsource-3.5.8-8.el8_10.x86_64.rpm SHA-256: ef8546b809c3f0bbc09f1046fd612c1e08bad4b57a37df8604aa8cfb761ce0fc postfix-debugsource-3.5.8-8.el8_10.x86_64.rpm SHA-256: ef8546b809c3f0bbc09f1046fd612c1e08bad4b57a37df8604aa8cfb761ce0fc postfix-ldap-3.5.8-8.el8_10.x86_64.rpm SHA-256: 5638e22bf022bdc0ac882601a182e99394fb80ae8af78f04b52b5829a42682ff postfix-ldap-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: c126e7b69bc4b3916a5dbf86234b3427fb00f9890b2fd3b86c421ec7bdfc3a69 postfix-ldap-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: c126e7b69bc4b3916a5dbf86234b3427fb00f9890b2fd3b86c421ec7bdfc3a69 postfix-lmdb-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 9eb72c27fab9311da6a75ec89ee71c27bf44409f111ba479c63b44e776c08112 postfix-lmdb-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 9eb72c27fab9311da6a75ec89ee71c27bf44409f111ba479c63b44e776c08112 postfix-mysql-3.5.8-8.el8_10.x86_64.rpm SHA-256: 0382c562e04524a2bb9ff2c87ac3f1fa2c57732e79ee9949fdd0f16bac3c0d35 postfix-mysql-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 0fb33c7d1467e71b4c97dcdc187fa5a34e92522789920e6f18e24349b05100cf postfix-mysql-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 0fb33c7d1467e71b4c97dcdc187fa5a34e92522789920e6f18e24349b05100cf postfix-pcre-3.5.8-8.el8_10.x86_64.rpm SHA-256: ad748baf3e4d910aeaf6224f26984889b25afe31b0edb80d083a24d60be9935f postfix-pcre-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 5e71eca08a151aab035168a48edd1884ed751a7adc1eef652534881e0678eeef postfix-pcre-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: 5e71eca08a151aab035168a48edd1884ed751a7adc1eef652534881e0678eeef postfix-perl-scripts-3.5.8-8.el8_10.x86_64.rpm SHA-256: 3a78acb5e5c9f829a756200f5e8e9a1332446adf331a82bc725ff05231a750e9 postfix-pgsql-3.5.8-8.el8_10.x86_64.rpm SHA-256: 37dc5777b8fb0a0af741656591197d241544c003547ef1996628e73b9a287bc5 postfix-pgsql-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: d898c0fb35b6fbf9ec69dbc74662ac8ffbf7a8ff5f0d56e2c9d6813449a5943d postfix-pgsql-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: d898c0fb35b6fbf9ec69dbc74662ac8ffbf7a8ff5f0d56e2c9d6813449a5943d postfix-sqlite-3.5.8-8.el8_10.x86_64.rpm SHA-256: d19e5971861c6a9529fb9ccc3e3aed5839ba3d96de385d0c2ecc55e1200d5123 postfix-sqlite-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: d4d752dd3d66d6411d4a3fb262e58e3bfbb1ac49a59762759b472d4d634acf51 postfix-sqlite-debuginfo-3.5.8-8.el8_10.x86_64.rpm SHA-256: d4d752dd3d66d6411d4a3fb262e58e3bfbb1ac49a59762759b472d4d634acf51 Red Hat Enterprise Linux for IBM z Systems 8 SRPM postfix-3.5.8-8.el8_10.src.rpm SHA-256: 9a842ef406cf76eff9751c157ccf761a7f5d2084608b3bbc63a638e302ac8bfa s390x postfix-3.5.8-8.el8_10.s390x.rpm SHA-256: 996c362cb5fe5fa8d8ab2345a0918062bf04e05c04d879301fa90b0715add0e2 postfix-cdb-3.5.8-8.el8_10.s390x.rpm SHA-256: 60b5c5cf0ab582aa86bb31e4cd1d8afae9357ea3218126b3cd1aeb350fc169f9 postfix-cdb-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 864f0a11ecc5b54746a79c30bce62acda667d159b6894085dc1ce9da42c283f6 postfix-cdb-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 864f0a11ecc5b54746a79c30bce62acda667d159b6894085dc1ce9da42c283f6 postfix-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: aafed89636077ad96df5725c4af59a6f23c13eb7eb9dbe7baa0f6101a818d005 postfix-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: aafed89636077ad96df5725c4af59a6f23c13eb7eb9dbe7baa0f6101a818d005 postfix-debugsource-3.5.8-8.el8_10.s390x.rpm SHA-256: a744f752c1296a66502135c5dd184c8c32be62840b862f24eb5738635cc8ee0c postfix-debugsource-3.5.8-8.el8_10.s390x.rpm SHA-256: a744f752c1296a66502135c5dd184c8c32be62840b862f24eb5738635cc8ee0c postfix-ldap-3.5.8-8.el8_10.s390x.rpm SHA-256: 98e3b4e9227573b1149485893067b69680b572a8f3afd9fc877f45959bd8fba7 postfix-ldap-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 1b74ebb90889d18213866afa2d2aa30fb6d5799b24b30fd32c8f98a336494f71 postfix-ldap-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 1b74ebb90889d18213866afa2d2aa30fb6d5799b24b30fd32c8f98a336494f71 postfix-lmdb-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: cc08fe3b6bb9c0628c6813681f71d1b3a1b494100ac2d55bf9a64fe8ee743a31 postfix-lmdb-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: cc08fe3b6bb9c0628c6813681f71d1b3a1b494100ac2d55bf9a64fe8ee743a31 postfix-mysql-3.5.8-8.el8_10.s390x.rpm SHA-256: 22c0abfa040f34ae66303735f3198b85ce92d0aa5d67f991f4aa700d221a2176 postfix-mysql-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 2fad1ca7b4e0a64bb8fcd422c9ada7598f3ad5c177688930f7f92fadaae1847e postfix-mysql-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 2fad1ca7b4e0a64bb8fcd422c9ada7598f3ad5c177688930f7f92fadaae1847e postfix-pcre-3.5.8-8.el8_10.s390x.rpm SHA-256: 64f05b6128e6fa273bbb250bcb8ca0504086a30eadf8ce0372fb41aba48b594d postfix-pcre-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 459c6003eb120bad3d10ae0def5214cbc0b9cd5bd892c7c569975347be4324ae postfix-pcre-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 459c6003eb120bad3d10ae0def5214cbc0b9cd5bd892c7c569975347be4324ae postfix-perl-scripts-3.5.8-8.el8_10.s390x.rpm SHA-256: 9357297dbb3456f9f67c957c51323e6ed07fd01f91baf0dd82e389b4447a1160 postfix-pgsql-3.5.8-8.el8_10.s390x.rpm SHA-256: 0bbf612bb9a793b02b5b05e2fc54a06b21c62f75ddf908fb69d56d34f7cd7aad postfix-pgsql-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 3959e6831b4966b40c57fd279cc714241f9043df9b3e1fd550ca42fad94bfa54 postfix-pgsql-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 3959e6831b4966b40c57fd279cc714241f9043df9b3e1fd550ca42fad94bfa54 postfix-sqlite-3.5.8-8.el8_10.s390x.rpm SHA-256: d5da7d92416e436687635f855d35dc4fc11f2cbe594ff490ad1698e3c1d77758 postfix-sqlite-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 2dcc89b878c4835de4e24f002a31c3d13e53f65a41003803e1e3ad19faafdb82 postfix-sqlite-debuginfo-3.5.8-8.el8_10.s390x.rpm SHA-256: 2dcc89b878c4835de4e24f002a31c3d13e53f65a41003803e1e3ad19faafdb82 Red Hat Enterprise Linux for Power, little endian 8 SRPM postfix-3.5.8-8.el8_10.src.rpm SHA-256: 9a842ef406cf76eff9751c157ccf761a7f5d2084608b3bbc63a638e302ac8bfa ppc64le postfix-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 1c7ed39ce3bdae80dc032dee443d2af0a886104413d4d695f837ecf72347dce4 postfix-cdb-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 96628a9dfc4b53397f0bf3500ed87b05422ec307b5365ba0c056f080f106ec35 postfix-cdb-debuginfo-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 0429723eac88d3df5e17b456b66c2762b03f87392fb065c10cd8e69e89a5f71d postfix-cdb-debuginfo-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 0429723eac88d3df5e17b456b66c2762b03f87392fb065c10cd8e69e89a5f71d postfix-debuginfo-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 2a96ac12c0e45de5c28673f38d613680260717ce496f6fce487482b66488f683 postfix-debuginfo-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 2a96ac12c0e45de5c28673f38d613680260717ce496f6fce487482b66488f683 postfix-debugsource-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 8d620b3cc10947aaa152e27ea1844cd084a55baa17b8ff4a7e24606589f3360c postfix-debugsource-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 8d620b3cc10947aaa152e27ea1844cd084a55baa17b8ff4a7e24606589f3360c postfix-ldap-3.5.8-8.el8_10.ppc64le.rpm SHA-256: 2b13aab086127e2ed079aa2d3c9dcacf474ac4a86ba663ed214feac4fb341263 postfix-ldap-debuginfo-3.5.8-8.el8_10.ppc64le.rpm SHA-256: fa1e7e206d72088d6f70d82070e0e9a9b9570408a351478ee4dce6fe620565bb postfix-ldap-debuginfo

Share this article