Release date:
2026-09-01 11:14:21 UTC
Description:
* SECURITY UPDATE: buffer over-read when an enhanced status code is not
followed by any text
- debian/patches/CVE-2026-43964.patch: stop dsn_split() advancing the
cursor past the terminating NUL when the status code occupies the
whole string (upstream 4992c82ad9, postfix-3.8.16).
- CVE-2026-43964
* Recognise Linux 5 and 6 build hosts
- debian/patches/support-linux-5-and-6-build-hosts.patch: postfix 3.3.0
predates Linux 5, so makedefs aborted with "Unknown system type" on
the EL9 (5.14) build nodes before compiling anything. Widen the case
list and add LINUX5/LINUX6 to the existing LINUX2/3/4 sys_defs.h
group, so the defines match a Linux 4 host exactly.
Updated packages:
-
postfix_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:298ce925eb1bf04541d93d3f9247d2947a0cfcdd
-
postfix-cdb_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:87e89c36bc47239112970d50c04ab87bd0b1d1b5
-
postfix-doc_3.3.0-1ubuntu0.4+tuxcare.els1_all.deb
sha:b49148ee87c6a2fab6eed07c18835fb215115c87
-
postfix-ldap_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:d3fa41af166b41e76905a2da98ed2e2af81ae991
-
postfix-lmdb_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:15af0c72e23009d863d5764e5261132df98abf55
-
postfix-mysql_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:470858b8b2035d23356b4391d8660975ddef0573
-
postfix-pcre_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:7a2b7d837d6fc3c893d1f3f70c985d17916f4a31
-
postfix-pgsql_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:ad5010a73e9c7411adbbe2d7cd6731c1519fe842
-
postfix-sqlite_3.3.0-1ubuntu0.4+tuxcare.els1_amd64.deb
sha:6caceec3103de623923df8863902d0d71afeb3f1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
