Red Hat Security AdvisoryRHSA-2026:25932
postfix security update
Released 2026-06-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) postfix-cdb-2:3.5.8-8.el8_10, postfix-ldap-2:3.5.8-8.el8_10, postfix-mysql-2:3.5.8-8.el8_10 +4
- Red Hat Enterprise Linux BaseOS (v. 8) postfix-2:3.5.8-8.el8_10
Fixes 1 record
Priority LOW 33
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00511 · Published 2026-05-04 · Partial fix · 3.8.16, 3.9.10 +1 CWE-193
