[Git][security-tracker-team/security-tracker][master] CVE-2026-43964/postfix: bullseye postponed

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
733786f8 by Sylvain Beucler at 2026-05-20T20:29:26+02:00
CVE-2026-43964/postfix: bullseye postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11184,6 +11184,7 @@ CVE-2026-43964 (Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9
 	- postfix 3.11.2-1 (bug #1135718)
 	[trixie] - postfix <no-dsa> (Minor issue)
 	[bookworm] - postfix <no-dsa> (Minor issue)
+	[bullseye] - postfix <postponed> (Minor issue, 1-byte OOB read in non-SMTP code)
 	NOTE: https://www.mail-archive.com/postfix-announce@postfix.org/msg00110.html
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/04/25
 CVE-2026-7740 (A security vulnerability has been detected in justdan96 tsMuxer up to  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/733786f85e5c9ae723be351d90b0e387dcb4196e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/733786f85e5c9ae723be351d90b0e387dcb4196e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260520/394dd594/attachment.htm>