[CLSA-2026:1778888181] postfix: Fix of CVE-2026-43964
Type:
security
Severity:
Important
Release date:
2026-05-15 23:36:25 UTC
Description:
- CVE-2026-43964: buffer over-read in dsn_split() due to off-by-one cursor advance when an enhanced status code is not followed by additional text
Updated packages:
  • postfix-2.10.1-6.amzn2.0.4.tuxcare.els1.x86_64.rpm
    sha:e688080b34a6a61fddc67269c1c6107d9a20b0f06b14c8c0760699f4aaa303e9
  • postfix-perl-scripts-2.10.1-6.amzn2.0.4.tuxcare.els1.x86_64.rpm
    sha:7672452b2986210bb0fc27b53400bab7c0c3835cc6c4412748dd247136c89d08
  • postfix-sysvinit-2.10.1-6.amzn2.0.4.tuxcare.els1.noarch.rpm
    sha:ad43b425a2d3f0d5d269c951bdb1c124d26538a0d6f12bb1637b8d4cbdeb1513
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.