CLSA-2026-1788261251

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788261251
Upstream
  • CVE-2026-43964
Published
2026-09-01T11:14:21Z
Modified
2026-10-26T09:32:03Z
Summary
Fix CVE(s): CVE-2026-43964
Details
  • SECURITY UPDATE: buffer over-read when an enhanced status code is not followed by any text
    • debian/patches/CVE-2026-43964.patch: stop dsn_split() advancing the cursor past the terminating NUL when the status code occupies the whole string (upstream 4992c82ad9, postfix-3.8.16).
    • CVE-2026-43964
  • Recognise Linux 5 and 6 build hosts
    • debian/patches/support-linux-5-and-6-build-hosts.patch: postfix 3.3.0 predates Linux 5, so makedefs aborted with "Unknown system type" on the EL9 (5.14) build nodes before compiling anything. Widen the case list and add LINUX5/LINUX6 to the existing LINUX2/3/4 sys_defs.h group, so the defines match a Linux 4 host exactly.
References

Affected packages

TuxCare:Ubuntu:18.04
postfix

Package

Name
postfix
Purl
pkg:deb/tuxcare/postfix?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-cdb

Package

Name
postfix-cdb
Purl
pkg:deb/tuxcare/postfix-cdb?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-doc

Package

Name
postfix-doc
Purl
pkg:deb/tuxcare/postfix-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-ldap

Package

Name
postfix-ldap
Purl
pkg:deb/tuxcare/postfix-ldap?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-lmdb

Package

Name
postfix-lmdb
Purl
pkg:deb/tuxcare/postfix-lmdb?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-mysql

Package

Name
postfix-mysql
Purl
pkg:deb/tuxcare/postfix-mysql?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-pcre

Package

Name
postfix-pcre
Purl
pkg:deb/tuxcare/postfix-pcre?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-pgsql

Package

Name
postfix-pgsql
Purl
pkg:deb/tuxcare/postfix-pgsql?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"
postfix-sqlite

Package

Name
postfix-sqlite
Purl
pkg:deb/tuxcare/postfix-sqlite?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788261251.json"