rpms/postfix
9
0
Fork 0
Code Issues Pull requests Releases Activity
0 releases 41 tags
  • imports/c10s/postfix-3.8.5-10.el10 eedf72b6ee

    Fix for CVE-2026-43964

    Ghost released this 2026-07-01 13:32:08 +00:00 | -298 commits to c8 since this release

    Upstream note:

    • Bugfix (defect introduced: Postfix 2.3, date: 20050323): buffer
      over-read when Postfix an enhanced status code is not followed
      by other text. For example, "5.7.2" without text after the
      three-number code. This CANNOT be triggered with an SMTP or
      LMTP server response; is confirmed with an access(5) table and
      likely with a policy server response; can possibly be triggered
      with pipe-to-command output, header_checks(5), body_checks(5),
      an error(8) transport in transport_maps, or a milter response;
      and is confirmed with a DNSBL server TXT response while Postfix
      is configured with "$rbl_code $rbl_text" in rbl_reply_maps or
      default_rbl_reply. This could result in process termination.
      Problem reported by Kamil Frankowicz.

    Resolves-Vulnerability: CVE-2026-43964
    Resolves: RHEL-176547

    Downloads