Back Linuxsecurity

Fedora 44 Postfix Important Buffer Over-Read CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 2, 2026

* Mon May 18 2026 Jaroslav Škarvada - 2:3.10.10-1 - New version Resolves: CVE-2026-43964

[ 1 ] Bug #2477885 - CVE-2026-43964 postfix: buffer over-read via malformed enhanced status code [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5cf8cc5f32' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Postfix Buffer Over-Read Vulnerability Advisory On May 18, 2026, an update was released for Fedora versions addressing a critical buffer over-read vulnerability identified as CVE-2026-43964. This vulnerability allows for a buffer over-read via a malformed enhanced status code, potentially exposing sensitive information. The affected systems include all Fedora distributions using Postfix version 2:3.10.10-1. Users are advised to upgrade their systems using the 'dnf' update program to mitigate the risk. The CVE was published on May 4, 2026, and is categorized as a significant security concern. Administrators should prioritize applying the patch to prevent potential exploitation. 2 sources 58

Extracted Entities

Fedora 44 Postfix Important Buffer Over-Read CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)