{"id":"CLSA-2026-1788261251","summary":"Fix CVE(s): CVE-2026-43964","details":"   * SECURITY UPDATE: buffer over-read when an enhanced status code is not\n     followed by any text\n     - debian/patches/CVE-2026-43964.patch: stop dsn_split() advancing the\n       cursor past the terminating NUL when the status code occupies the\n       whole string (upstream 4992c82ad9, postfix-3.8.16).\n     - CVE-2026-43964\n   * Recognise Linux 5 and 6 build hosts\n     - debian/patches/support-linux-5-and-6-build-hosts.patch: postfix 3.3.0\n       predates Linux 5, so makedefs aborted with \"Unknown system type\" on\n       the EL9 (5.14) build nodes before compiling anything. Widen the case\n       list and add LINUX5/LINUX6 to the existing LINUX2/3/4 sys_defs.h\n       group, so the defines match a Linux 4 host exactly.","modified":"2026-10-26T09:32:03.920649219Z","published":"2026-09-01T11:14:21Z","upstream":["CVE-2026-43964"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788261251.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43964"}],"affected":[{"package":{"name":"postfix","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-cdb","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-cdb?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-ldap","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-ldap?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-lmdb","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-lmdb?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-mysql","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-mysql?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-pcre","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-pcre?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-pgsql","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-pgsql?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}},{"package":{"name":"postfix-sqlite","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/postfix-sqlite?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"}}],"schema_version":"1.9.0"}