Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 9 libidn Critical Out-Of-Bounds Read CVE-2026-57053

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed oras Moderate Threat Update 2026-11297-1 CVE-2026-50163

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Nginx New Moderate Update Advisory Released 2026-11295-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE gomuks Moderate Security Issue Fix 2026-11290-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Blender Moderate Security Issue Advisory 2026-11288-1

Calendar White Jul 18, 2026
moderate
Debianlts Large Esm H900
Debian LTS

Debian LTS Linux Critical Privilege Escalation and DoS Update DLA-4688-1

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE 16.0 cyrus-imapd Moderate Threats Update 2026-21368-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Lux Important Denial of Service Issues 2026-21367-1

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Grafana Important Request Limit XSS Fix 2026-21366-1

Calendar White Jul 18, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 48 articles for you...
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorybuffer overflowthreat

Oracle Linux 10 Postfix Important Buffer Overflow Fix ELSA-2026-25930

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-25930 http://linux.oracle.com/errata/ELSA-2026-25930.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: postfix-3.8.5-10.el10_2.x86_64.rpm postfix-cdb-3.8.5-10.el10_2.x86_64.rpm postfix-ldap-3.8.5-10.el10_2.x86_64.rpm postfix-lmdb-3.8.5-10.el10_2.x86_64.rpm postfix-mysql-3.8.5-10.el10_2.x86_64.rpm postfix-pcre-3.8.5-10.el10_2.x86_64.rpm postfix-perl-scripts-3.8.5-10.el10_2.x86_64.rpm postfix-pgsql-3.8.5-10.el10_2.x86_64.rpm postfix-sqlite-3.8.5-10.el10_2.x86_64.rpm aarch64: postfix-3.8.5-10.el10_2.aarch64.rpm postfix-cdb-3.8.5-10.el10_2.aarch64.rpm postfix-ldap-3.8.5-10.el10_2.aarch64.rpm postfix-lmdb-3.8.5-10.el10_2.aarch64.rpm postfix-mysql-3.8.5-10.el10_2.aarch64.rpm postfix-pcre-3.8.5-10.el10_2.aarch64.rpm postfix-perl-scripts-3.8.5-10.el10_2.aarch64.rpm postfix-pgsql-3.8.5-10.el10_2.aarch64.rpm postfix-sqlite-3.8.5-10.el10_2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/postfix-3.8.5-10.el10_2.src.rpm Related CVEs: CVE-2026-43964 Description of changes: [2:3.8.5-10] - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 10 updates fix buffer over-read in Postfix. Update urgently to mitigate risk.. Postfix Update, Oracle Linux Security, Buffer Overflow Protection. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 17, 2026 •Important Oracle
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicesecurity issue

Debian Postfix Denial of Service Threat Advisory DSA-6382-1

Multiple security vulnerabilities were discovered in the Postfix mail transport agent, which could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 3.10.12-0+deb13u2. We recommend that you upgrade your postfix packages.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6382-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff July 07, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : postfix CVE ID : not yet available Multiple security vulnerabilities were discovered in the Postfix mail transport agent, which could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 3.10.12-0+deb13u2. We recommend that you upgrade your postfix packages. For the detailed security status of postfix please refer to its security tracker page at: https://security-tracker.debian.org/tracker/postfix Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Multiple vulnerabilities in Postfix lead to denial of service - update urgently recommended to maintain system security.. Postfix security patch, Debian DSA advisory, mail transport vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 07, 2026 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Postfix Moderate Buffer Overread Threat Fix 2026-2780-1

An update that solves one vulnerability can now be installed.. # Security update for postfix Announcement ID: SUSE-SU-2026:2780-1 Release Date: 2026-07-06T14:11:50Z Rating: moderate References: * bsc#1264062 Cross-References: * CVE-2026-43964 CVSS scores: * CVE-2026-43964 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43964 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for postfix fixes the following issue * CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2780=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * postfix-doc-3.2.10-3.33.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * postfix-mysql-3.2.10-3.33.1 * postfix-devel-3.2.10-3.33.1 * postfix-debuginfo-3.2.10-3.33.1 * postfix-debugsource-3.2.10-3.33.1 * postfix-3.2.10-3.33.1 * postfix-mysql-debuginfo-3.2.10-3.33.1 ## References: * https://www.suse.com/security/cve/CVE-2026-43964.html *https://bugzilla.suse.com/show_bug.cgi?id=1264062 . Update for SUSE Linux addresses moderate risk due to postfix buffer overread and crash. Install patch now.. SUSE Postfix Update, Buffer Overread Patch, Security Advisory SUSE. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •moderate SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatethreat

openSUSE Postfix Moderate Buffer Overread Vuln 2026-2781-1

An update that solves one vulnerability can now be installed.. # Security update for postfix Announcement ID: SUSE-SU-2026:2781-1 Release Date: 2026-07-06T14:12:18Z Rating: moderate References: * bsc#1264062 Cross-References: * CVE-2026-43964 CVSS scores: * CVE-2026-43964 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43964 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Legacy Module 15-SP7 * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for postfix fixes the following issue * CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-2781=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2781=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2781=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-2781=1 ## Package List: * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postfix-bdb-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-debuginfo-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-3.8.4-150600.3.6.1 * postfix-bdb-debugsource-3.8.4-150600.3.6.1 * postfix-bdb-debuginfo-3.8.4-150600.3.6.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postfix-mysql-debuginfo-3.8.4-150600.3.6.1 * postfix-mysql-3.8.4-150600.3.6.1 * postfix-debugsource-3.8.4-150600.3.6.1 * postfix-debuginfo-3.8.4-150600.3.6.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * postfix-ldap-debuginfo-3.8.4-150600.3.6.1 * postfix-mysql-debuginfo-3.8.4-150600.3.6.1 * postfix-postgresql-3.8.4-150600.3.6.1 * postfix-debugsource-3.8.4-150600.3.6.1 * postfix-bdb-3.8.4-150600.3.6.1 * postfix-debuginfo-3.8.4-150600.3.6.1 * postfix-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-debuginfo-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-3.8.4-150600.3.6.1 * postfix-ldap-3.8.4-150600.3.6.1 * postfix-bdb-debugsource-3.8.4-150600.3.6.1 * postfix-mysql-3.8.4-150600.3.6.1 * postfix-postgresql-debuginfo-3.8.4-150600.3.6.1 * postfix-bdb-debuginfo-3.8.4-150600.3.6.1 * openSUSE Leap 15.6 (noarch) * postfix-devel-3.8.4-150600.3.6.1 * postfix-doc-3.8.4-150600.3.6.1 * Basesystem Module 15-SP7 (noarch) * postfix-devel-3.8.4-150600.3.6.1 * postfix-doc-3.8.4-150600.3.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postfix-ldap-debuginfo-3.8.4-150600.3.6.1 * postfix-ldap-3.8.4-150600.3.6.1 * postfix-debuginfo-3.8.4-150600.3.6.1 * postfix-3.8.4-150600.3.6.1 * postfix-debugsource-3.8.4-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-43964.html * https://bugzilla.suse.com/show_bug.cgi?id=1264062 . Update for postfix addresses vulnerability CVE-2026-43964 in openSUSE. Install recommended patches for system security.. postfix update, openSUSE security, moderate threat, buffer overread issue. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •moderate OpenSUSE
Banner 3 1028x280 1708121785 1771599793
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Postfix Moderate Buffer Overread Advisory SUSE-SU-2026-2781-1

An update that solves one vulnerability can now be installed.. # Security update for postfix Announcement ID: SUSE-SU-2026:2781-1 Release Date: 2026-07-06T14:12:18Z Rating: moderate References: * bsc#1264062 Cross-References: * CVE-2026-43964 CVSS scores: * CVE-2026-43964 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43964 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Legacy Module 15-SP7 * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for postfix fixes the following issue * CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-2781=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2781=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2781=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-2781=1 ## Package List: * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postfix-bdb-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-debuginfo-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-3.8.4-150600.3.6.1 * postfix-bdb-debugsource-3.8.4-150600.3.6.1 * postfix-bdb-debuginfo-3.8.4-150600.3.6.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postfix-mysql-debuginfo-3.8.4-150600.3.6.1 * postfix-mysql-3.8.4-150600.3.6.1 * postfix-debugsource-3.8.4-150600.3.6.1 * postfix-debuginfo-3.8.4-150600.3.6.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * postfix-ldap-debuginfo-3.8.4-150600.3.6.1 * postfix-mysql-debuginfo-3.8.4-150600.3.6.1 * postfix-postgresql-3.8.4-150600.3.6.1 * postfix-debugsource-3.8.4-150600.3.6.1 * postfix-bdb-3.8.4-150600.3.6.1 * postfix-debuginfo-3.8.4-150600.3.6.1 * postfix-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-debuginfo-3.8.4-150600.3.6.1 * postfix-bdb-lmdb-3.8.4-150600.3.6.1 * postfix-ldap-3.8.4-150600.3.6.1 * postfix-bdb-debugsource-3.8.4-150600.3.6.1 * postfix-mysql-3.8.4-150600.3.6.1 * postfix-postgresql-debuginfo-3.8.4-150600.3.6.1 * postfix-bdb-debuginfo-3.8.4-150600.3.6.1 * openSUSE Leap 15.6 (noarch) * postfix-devel-3.8.4-150600.3.6.1 * postfix-doc-3.8.4-150600.3.6.1 * Basesystem Module 15-SP7 (noarch) * postfix-devel-3.8.4-150600.3.6.1 * postfix-doc-3.8.4-150600.3.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postfix-ldap-debuginfo-3.8.4-150600.3.6.1 * postfix-ldap-3.8.4-150600.3.6.1 * postfix-debuginfo-3.8.4-150600.3.6.1 * postfix-3.8.4-150600.3.6.1 * postfix-debugsource-3.8.4-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-43964.html * https://bugzilla.suse.com/show_bug.cgi?id=1264062 . A security update for postfix addresses a moderate-rated buffer overread issue in SUSE's products. Install now to protect.. SUSE Security Update, postfix update, buffer overread, process instability, software security. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •moderate SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateupdate

SUSE Postfix Moderate Buffer Overread Risk CVE-2026-43964

An update that solves one vulnerability can now be installed.. # Security update for postfix Announcement ID: SUSE-SU-2026:22335-1 Release Date: 2026-06-22T14:37:16Z Rating: moderate References: * bsc#1264062 Cross-References: * CVE-2026-43964 CVSS scores: * CVE-2026-43964 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43964 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for postfix fixes the following issue * CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1032=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1032=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * postfix-mysql-debuginfo-3.10.2-160000.3.1 * postfix-postgresql-debuginfo-3.10.2-160000.3.1 * postfix-3.10.2-160000.3.1 * postfix-mysql-3.10.2-160000.3.1 * postfix-debugsource-3.10.2-160000.3.1 * postfix-debuginfo-3.10.2-160000.3.1 * postfix-postgresql-3.10.2-160000.3.1 * postfix-ldap-3.10.2-160000.3.1 * postfix-ldap-debuginfo-3.10.2-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) *postfix-doc-3.10.2-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * postfix-mysql-debuginfo-3.10.2-160000.3.1 * postfix-postgresql-debuginfo-3.10.2-160000.3.1 * postfix-3.10.2-160000.3.1 * postfix-debugsource-3.10.2-160000.3.1 * postfix-mysql-3.10.2-160000.3.1 * postfix-postgresql-3.10.2-160000.3.1 * postfix-debuginfo-3.10.2-160000.3.1 * postfix-ldap-3.10.2-160000.3.1 * postfix-ldap-debuginfo-3.10.2-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * postfix-doc-3.10.2-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-43964.html * https://bugzilla.suse.com/show_bug.cgi?id=1264062 . A critical security update addresses a buffer overread issue in postfix for SUSE. Install now for system security.. buffer overread security update, SUSE postfix update, moderate security advisory. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 01, 2026 •moderate SuSE
Banner 3 1028x280 1708121785 1771599793
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatepostfix

openSUSE Postfix Moderate Buffer Overread Issue 2026-21020-1

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for postfix ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21020-1 Rating: moderate References: * bsc#1264062 Cross-References: * CVE-2026-43964 CVSS scores: * CVE-2026-43964 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43964 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number (bsc#1264062). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1032=1 Package List: - openSUSE Leap 16.0: postfix-3.10.2-160000.3.1 postfix-bdb-3.10.2-160000.3.1 postfix-bdb-lmdb-3.10.2-160000.3.1 postfix-devel-3.10.2-160000.3.1 postfix-doc-3.10.2-160000.3.1 postfix-ldap-3.10.2-160000.3.1 postfix-mysql-3.10.2-160000.3.1 postfix-postgresql-3.10.2-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-43964.html . This openSUSE advisory addresses a moderate buffer overread issue in Postfix, recommending patch installation for users.. openSUSE updates, Postfix security, buffer overread fix, moderate security update. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 30, 2026 •moderate OpenSUSE
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisoryimportantRHEL

Oracle Linux 9 Postfix Important Buffer Over-read Vuln ELSA-2026-26205

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-26205 http://linux.oracle.com/errata/ELSA-2026-26205.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: postfix-3.5.25-3.el9_8.x86_64.rpm postfix-cdb-3.5.25-3.el9_8.x86_64.rpm postfix-ldap-3.5.25-3.el9_8.x86_64.rpm postfix-lmdb-3.5.25-3.el9_8.x86_64.rpm postfix-mysql-3.5.25-3.el9_8.x86_64.rpm postfix-pcre-3.5.25-3.el9_8.x86_64.rpm postfix-perl-scripts-3.5.25-3.el9_8.x86_64.rpm postfix-pgsql-3.5.25-3.el9_8.x86_64.rpm postfix-sqlite-3.5.25-3.el9_8.x86_64.rpm aarch64: postfix-3.5.25-3.el9_8.aarch64.rpm postfix-cdb-3.5.25-3.el9_8.aarch64.rpm postfix-ldap-3.5.25-3.el9_8.aarch64.rpm postfix-lmdb-3.5.25-3.el9_8.aarch64.rpm postfix-mysql-3.5.25-3.el9_8.aarch64.rpm postfix-pcre-3.5.25-3.el9_8.aarch64.rpm postfix-perl-scripts-3.5.25-3.el9_8.aarch64.rpm postfix-pgsql-3.5.25-3.el9_8.aarch64.rpm postfix-sqlite-3.5.25-3.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/postfix-3.5.25-3.el9_8.src.rpm Related CVEs: CVE-2026-43964 Description of changes: [2:3.5.25-3] - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Critical updates for Oracle Linux 9 addressing buffer over-read issue in Postfix. Ensure your systems are secure.. Oracle Linux, Postfix Update, Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 26, 2026 •Important Oracle
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics