# postfix security updates

Patch Radar has 34 security fixes for postfix, closing 2 CVEs. The newest security fix is ELSA-2026-25930 (2:3.8.5-10.el10_2), released July 16, 2026.

- Web page: https://patchblox.com/security/product/linux/postfix
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ELSA-2026-25930](https://patchblox.com/security/data/fix/linux/elsa-2026-25930.md) | Jul 16, 2026 | ol 10 2:3.8.5-10.el10_2 | High | 1 | 0 |
| [SUSE-SU-2026:2781-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2781-1.md) | Jul 6, 2026 | sles 15.7 3.8.4-150600.3.6.1 | High | 1 | 0 |
| [RHSA-2026:26205](https://patchblox.com/security/data/fix/linux/rhsa-2026-26205.md) | Jun 24, 2026 | RHEL 9 2:3.5.25-3.el9_8 | High | 1 | 0 |
| [RHSA-2026:25932](https://patchblox.com/security/data/fix/linux/rhsa-2026-25932.md) | Jun 24, 2026 | RHEL 8 2:3.5.8-8.el8_10 | High | 1 | 0 |
| [ELSA-2026-26205](https://patchblox.com/security/data/fix/linux/elsa-2026-26205.md) | Jun 23, 2026 | ol 9 2:3.5.25-3.el9_8 | High | 1 | 0 |
| [OPENSUSE-SU-2026:21020-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21020-1.md) | Jun 22, 2026 | opensuse-leap 16.0 3.10.2-160000.3.1 | High | 1 | 0 |
| [SUSE-SU-2026:22335-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22335-1.md) | Jun 22, 2026 | sles 16.0 3.10.2-160000.3.1 | High | 1 | 0 |
| [RLSA-2026:25930](https://patchblox.com/security/data/fix/linux/rlsa-2026-25930.md) | Jun 19, 2026 | rocky 10 2:3.8.5-10.el10_2 | High | 1 | 0 |
| [RLSA-2026:26205](https://patchblox.com/security/data/fix/linux/rlsa-2026-26205.md) | Jun 17, 2026 | rocky 9 2:3.5.25-3.el9_8 | High | 1 | 0 |
| [RLSA-2026:25932](https://patchblox.com/security/data/fix/linux/rlsa-2026-25932.md) | Jun 17, 2026 | rocky 8 2:3.5.8-8.el8_10 | High | 1 | 0 |
| [ALSA-2026:26205](https://patchblox.com/security/data/fix/linux/alsa-2026-26205.md) | Jun 16, 2026 | almalinux 9 2:3.5.25-3.el9_8 | High | 1 | 0 |
| [ELSA-2026-25932](https://patchblox.com/security/data/fix/linux/elsa-2026-25932.md) | Jun 16, 2026 | ol 8 2:3.5.8-8.el8_10 | High | 1 | 0 |
| [ALSA-2026:25930](https://patchblox.com/security/data/fix/linux/alsa-2026-25930.md) | Jun 15, 2026 | almalinux 10 2:3.8.5-10.el10_2 | High | 1 | 0 |
| [ALSA-2026:25932](https://patchblox.com/security/data/fix/linux/alsa-2026-25932.md) | Jun 15, 2026 | almalinux 8 2:3.5.8-8.el8_10 | High | 1 | 0 |
| [postfix 3.10.2-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-postfix-3.10.2-1ubuntu2.1.md) | May 15, 2026 | Ubuntu 25.10 (questing) 3.10.2-1ubuntu2.1 | High | 1 | 0 |
| [postfix 3.8.6-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-postfix-3.8.6-1ubuntu0.1.md) | May 15, 2026 | Ubuntu 24.04.5 LTS (noble) 3.8.6-1ubuntu0.1 | High | 1 | 0 |
| [postfix 3.6.4-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-postfix-3.6.4-1ubuntu1.4.md) | May 15, 2026 | Ubuntu 22.04.1 LTS (jammy) 3.6.4-1ubuntu1.4 | High | 1 | 0 |
| [DEBIAN-CVE-2026-43964](https://patchblox.com/security/data/fix/linux/debian-cve-2026-43964.md) | May 15, 2026 | Debian 14 3.11.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-43964](https://patchblox.com/security/data/fix/linux/debian-cve-2026-43964.md) | May 15, 2026 | Debian 13.5 (trixie) 3.10.10-0+deb13u1 | High | 1 | 0 |
| [RHSA-2026:51436](https://patchblox.com/security/data/fix/linux/rhsa-2026-51436.md) | May 4, 2026 | RHEL 10 3.8.5-8.el10_0.1 | High | 1 | 0 |
| [postfix 3.10.6-4ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-postfix-3.10.6-4ubuntu2.1.md) | May 4, 2026 | Ubuntu 26.04.1 LTS (resolute) 3.10.6-4ubuntu2.1 | High | 1 | 0 |
| [postfix 3.3.0-1ubuntu0.4+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postfix-3.3.0-1ubuntu0.4-esm4.md) | May 4, 2026 | Ubuntu 18.04.6 LTS (bionic) 3.3.0-1ubuntu0.4+esm4 | High | 1 | 0 |
| [postfix 3.4.13-0ubuntu1.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-postfix-3.4.13-0ubuntu1.4-esm1.md) | May 4, 2026 | Ubuntu 20.04 LTS (focal) 3.4.13-0ubuntu1.4+esm1 | High | 1 | 0 |
| [RLSA-2024:9243](https://patchblox.com/security/data/fix/linux/rlsa-2024-9243.md) | Mar 17, 2025 | rocky 9 2:3.5.25-1.el9 | Routine | 1 | 0 |
| [ELSA-2024-9243](https://patchblox.com/security/data/fix/linux/elsa-2024-9243.md) | Nov 14, 2024 | ol 9 2:3.5.25-1.el9 | Routine | 1 | 0 |
| [ALSA-2024:9243](https://patchblox.com/security/data/fix/linux/alsa-2024-9243.md) | Nov 12, 2024 | almalinux 9 2:3.5.25-1.el9 | Routine | 1 | 0 |
| [RHSA-2024:9243](https://patchblox.com/security/data/fix/linux/rhsa-2024-9243.md) | Nov 12, 2024 | RHEL 9 2:3.5.25-1.el9 | Routine | 1 | 0 |
| [ALAS2023-2024-495](https://patchblox.com/security/data/fix/linux/alas2023-2024-495.md) | Jan 19, 2024 | amzn 2023 2:3.7.2-4.amzn2023.0.5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-51764](https://patchblox.com/security/data/fix/linux/debian-cve-2023-51764.md) | Dec 24, 2023 | Debian 12.15 (bookworm) 3.7.9-0+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-51764](https://patchblox.com/security/data/fix/linux/debian-cve-2023-51764.md) | Dec 24, 2023 | Debian 13.5 (trixie) 3.8.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-51764](https://patchblox.com/security/data/fix/linux/debian-cve-2023-51764.md) | Dec 24, 2023 | Debian 14 3.8.4-1 | Routine | 1 | 0 |
| [postfix 3.3.0-1ubuntu0.4+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-postfix-3.3.0-1ubuntu0.4-esm3.md) | Dec 23, 2023 | Ubuntu 18.04.6 LTS (bionic) 3.3.0-1ubuntu0.4+esm3 | Routine | 1 | 0 |
| [postfix 3.4.13-0ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-postfix-3.4.13-0ubuntu1.4.md) | Dec 23, 2023 | Ubuntu 20.04 LTS (focal) 3.4.13-0ubuntu1.4 | Routine | 1 | 0 |
| [postfix 3.6.4-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-postfix-3.6.4-1ubuntu1.3.md) | Dec 23, 2023 | Ubuntu 22.04.1 LTS (jammy) 3.6.4-1ubuntu1.3 | Routine | 1 | 0 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
