Back Linuxsecurity

Rocky Linux Postfix Major Buffer Over-Read Vulnerability RLSA-2026

Linuxsecurity •LinuxSecurity Advisories • June 19, 2026

An update is available for postfix. This update affects Rocky Linux 10. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

postfix-sqlite-debuginfo-2:3.8.5-10.el10_2.x86_64.rpm postfix-lmdb-debuginfo-2:3.8.5-10.el10_2.ppc64le.rpm postfix-cdb-debuginfo-2:3.8.5-10.el10_2.ppc64le.rpm postfix-mysql-2:3.8.5-10.el10_2.x86_64.rpm postfix-ldap-2:3.8.5-10.el10_2.aarch64.rpm postfix-ldap-debuginfo-2:3.8.5-10.el10_2.s390x.rpm postfix-ldap-debuginfo-2:3.8.5-10.el10_2.ppc64le.rpm postfix-ldap-2:3.8.5-10.el10_2.s390x.rpm postfix-pcre-debuginfo-2:3.8.5-10.el10_2.x86_64.rpm postfix-2:3.8.5-10.el10_2.x86_64.rpm postfix-debugsource-2:3.8.5-10.el10_2.aarch64.rpm postfix-perl-scripts-2:3.8.5-10.el10_2.x86_64.rpm postfix-cdb-debuginfo-2:3.8.5-10.el10_2.aarch64.rpm postfix-pcre-debuginfo-2:3.8.5-10.el10_2.s390x.rpm postfix-cdb-debuginfo-2:3.8.5-10.el10_2.s390x.rpm postfix-ldap-debuginfo-2:3.8.5-10.el10_2.aarch64.rpm postfix-pcre-2:3.8.5-10.el10_2.aarch64.rpm postfix-lmdb-2:3.8.5-10.el10_2.ppc64le.rpm postfix-perl-scripts-2:3.8.5-10.el10_2.s390x.rpm postfix-pcre-2:3.8.5-10.el10_2.ppc64le.rpm postfix-pcre-debuginfo-2:3.8.5-10.el10_2.aarch64.rpm Read the Full Advisory

postfix-sqlite-debuginfo-2:3.8.5-10.el10_2.x86_64.rpm

postfix-lmdb-debuginfo-2:3.8.5-10.el10_2.ppc64le.rpm

postfix-cdb-debuginfo-2:3.8.5-10.el10_2.ppc64le.rpm

postfix-mysql-2:3.8.5-10.el10_2.x86_64.rpm

postfix-ldap-2:3.8.5-10.el10_2.aarch64.rpm

postfix-ldap-debuginfo-2:3.8.5-10.el10_2.s390x.rpm

postfix-ldap-debuginfo-2:3.8.5-10.el10_2.ppc64le.rpm

postfix-ldap-2:3.8.5-10.el10_2.s390x.rpm

postfix-pcre-debuginfo-2:3.8.5-10.el10_2.x86_64.rpm

postfix-2:3.8.5-10.el10_2.x86_64.rpm

postfix-debugsource-2:3.8.5-10.el10_2.aarch64.rpm

postfix-perl-scripts-2:3.8.5-10.el10_2.x86_64.rpm

postfix-cdb-debuginfo-2:3.8.5-10.el10_2.aarch64.rpm

postfix-pcre-debuginfo-2:3.8.5-10.el10_2.s390x.rpm

postfix-cdb-debuginfo-2:3.8.5-10.el10_2.s390x.rpm

postfix-ldap-debuginfo-2:3.8.5-10.el10_2.aarch64.rpm

postfix-pcre-2:3.8.5-10.el10_2.aarch64.rpm

postfix-lmdb-2:3.8.5-10.el10_2.ppc64le.rpm

postfix-perl-scripts-2:3.8.5-10.el10_2.s390x.rpm

postfix-pcre-2:3.8.5-10.el10_2.ppc64le.rpm

postfix-pcre-debuginfo-2:3.8.5-10.el10_2.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Rocky Linux Affecting Multiple Components Rocky Linux has released multiple security updates addressing critical vulnerabilities across various components, including 389-ds-base, HPLIP, and dracut. The vulnerabilities include a denial-of-service (DoS) issue in 389-ds-base (CVE-2026-8631) and critical privilege escalation vulnerabilities in HPLIP and dracut (CVE-2026-31669). These vulnerabilities affect Rocky Linux versions 8 and 10, with potential for remote exploitation. Administrators are urged to apply the patches immediately to mitigate risks. The updates were published on June 19, 2026, and include detailed CVSS scores for each vulnerability. The vulnerabilities have been confirmed and are considered high risk due to their potential impact on system integrity and availability. 860 sources 74

Extracted Entities

Rocky Linux Postfix Major Buffer Over-Read Vulnerability RLSA-2026

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (3)

Vulnerabilities (1)