[CLSA-2026:1789577104] Fix CVE(s): CVE-2026-43964
Type:
security
Severity:
Important
Release date:
2026-09-16 16:45:14 UTC
Description:
* SECURITY UPDATE: Buffer over-read in dsn_split() - debian/patches/CVE-2026-43964.patch: do not advance past the end of an enhanced status code that is not followed by other text, in src/global/dsn_util.c - CVE-2026-43964
CVEs fixed:
Updated packages:
  • postfix_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:560d76be56d6b1f9a02acff25a412a09665fd442
  • postfix-cdb_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:f32e2bce1b6b094017aae3383aaede9b74b6f1ae
  • postfix-doc_3.5.25-0+deb11u1+tuxcare.els1_all.deb
    sha:ad01bfc2558a205cf4f26c2998ed35afe1949299
  • postfix-ldap_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:4e931195e6b5d678dbc5e8241c6437d6dda7f492
  • postfix-lmdb_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:79204cc949e6790312357f419314faabfb6fc860
  • postfix-mysql_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:9ce3318f061d164b2d523b0e39c06638e066be2a
  • postfix-pcre_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:178f5324c950f6714bd766cc6810e6de2cdfe0f1
  • postfix-pgsql_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:44a197b31d62cc075c914b684c4069f42f7c3345
  • postfix-sqlite_3.5.25-0+deb11u1+tuxcare.els1_amd64.deb
    sha:fbb4b1449384b79dcfc99008e00328647494c44e
  • postfix_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:74ccc39c1eca5d1d8084072ec071e5564b702683
  • postfix-cdb_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:e2e65b636c22a531d2a4754d4c1d1159fb327b45
  • postfix-ldap_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:fc53e577370bd09e2af97974c420c0aac6e6844c
  • postfix-lmdb_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:5f39c2e9bd675135361e8f01b9c740b46fae3b58
  • postfix-mysql_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:40ca2ae9d77b7dd8eb67fbf173ef85e217cb5ca1
  • postfix-pcre_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:392f1d3bd05b277b5c7c032b3a4a00d4d8e17bbc
  • postfix-pgsql_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:598395ede87991cb8bd1ecb9d7c67a68f3eee9fa
  • postfix-sqlite_3.5.25-0+deb11u1+tuxcare.els1_arm64.deb
    sha:37a0e5b3ddd922df17c39fdbd78e97b26afb730a
  • postfix_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:0a5aef4bca0b8914d5c1185b276ec22551b33ed1
  • postfix-cdb_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:dddbc2153841bb7d50d8100f36dd34e76a576dd9
  • postfix-ldap_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:7ffdf577fc843dd04e7e9603453d39ac6fb52f1a
  • postfix-lmdb_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:b3e58c88233bfb9f63fba76ba6aea9c54a187e2a
  • postfix-mysql_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:5c243a4bb7b509284b3014633570575e55c8b06f
  • postfix-pcre_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:f4b401a4fce91d8fb77e0c653c22300e2110b25a
  • postfix-pgsql_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:a0dc61e0ee0236ea32129645a4d9404dd6ff8f11
  • postfix-sqlite_3.5.25-0+deb11u1+tuxcare.els1_armel.deb
    sha:81e4d856af592ae362fb25b7e5c4822c375eee1b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.