Postfix 3.2.22 → 3.11.7
9 releases · 0 breaking changes · 0 security fixes · 2 advisories fixed
0security0breaking0deprecated0feature0fix
Vulnerabilities fixed by this upgrade
- 3.7 CVE-2026-43964 Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.
- 5.3 CVE-2023-51764 Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in…
Breaking changes
None in the release notes.
Security changes
None in the release notes.