Is Postfix 3.4.29 affected?
Apr 19, 2023 · Release notes ↗
2 known vulnerabilities affect 3.4.29 (highest CVSS 5.3).
Your branch 3.4 has reached end of life (Apr 17, 2023).
7 newer releases in its track, up to 3.11.7. What changed up to 3.11.7
Vulnerabilities affecting 3.4.29
- 5.3 CVE-2023-51764 Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in… fixed in 3.5.23
- 3.7 CVE-2026-43964 Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number. fixed in 3.8.16
Newer releases
| 3.11.7 | Sep 8, 2026 | 3.4.29 → 3.11.7 |
| 3.10.14 | Sep 8, 2026 | 3.4.29 → 3.10.14 |
| 3.9.15 | Sep 8, 2026 | 3.4.29 → 3.9.15 |
| 3.8.21 | Sep 8, 2026 | 3.4.29 → 3.8.21 |
| 3.7.23 | Sep 8, 2026 | 3.4.29 → 3.7.23 |
| 3.6.21 | Sep 8, 2026 | 3.4.29 → 3.6.21 |
| 3.5.28 | Sep 8, 2026 | 3.4.29 → 3.5.28 |