RHSA-2026:57174: Important: postfix security update

Published Aug 19, 2026

Updated

Important: postfix security update

Other sources

The postfix packages provide a Mail Transport Agent (MTA), which supports protocols like LDAP, SMTP AUTH (SASL), and TLS.Security Fix(es): postfix: buffer over-read via malformed enhanced status code (CVE-2026-43964) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

14 affected componentsFixes available

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian

redhat/postfix<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-debuginfo<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-perl-scripts<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-sysvinit<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-debuginfo<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-perl-scripts<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-debuginfo<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

redhat/postfix-perl-scripts<2.10.1-9.el7_9.1

2.10.1-9.el7_9.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/postfix to a version that resolves this vulnerability.
Fixed in 2.10.1-9.el7_9.1
Upgrade
Upgrade redhat/postfix-debuginfo to a version that resolves this vulnerability.
Fixed in 2.10.1-9.el7_9.1
Upgrade
Upgrade redhat/postfix-perl-scripts to a version that resolves this vulnerability.
Fixed in 2.10.1-9.el7_9.1
Upgrade
Upgrade redhat/postfix-sysvinit to a version that resolves this vulnerability.
Fixed in 2.10.1-9.el7_9.1

Event History

Aug 19, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·08:46 PM

Data Sourced

via Red Hat·08:46 PM

Severity

RHSA-2026:57174: Important: postfix security update

Other sources

Affected Software

Remediation

Event History

Company

Resources

Contact