ELBA-2026-85854

ELBA-2026-85854 - 389-ds:1.4 bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-10-21

Description

[1.4.3.39-29]
- Bump version to 1.4.3.39-29
- Resolves: RHEL-216718 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index [rhel-8.10.z]
- Resolves: RHEL-234359 - Online reinitialization is failing with the supplier being busy calling idrange_add_id() [rhel-8.10.z]
- Resolves: RHEL-256397 - MOD_REPLACE on groups/link attributes modifies overlap targets [rhel-8.10.z]

[1.4.3.39-28]
- Bump version to 1.4.3.39-28
- Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-8.10.z]
- Resolves: RHEL-220511 - EMBARGOED CVE-2026-18355 389-ds:1.4/389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-8.10.z]
- Resolves: RHEL-232864 - EMBARGOED CVE-2026-18922 389-ds:1.4/389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-8.10.z]
- Resolves: RHEL-244463 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-8.10.z]
- Resolves: RHEL-245383 - EMBARGOED CVE-2026-76560 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-8.10.z]
- Resolves: RHEL-248762 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-8.10.z]

[1.4.3.39-27]
- Bump version to 1.4.3.39-27
- Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-8.10.z]
- Resolves: RHEL-220511 - EMBARGOED CVE-2026-18355 389-ds:1.4/389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-8.10.z]
- Resolves: RHEL-232864 - EMBARGOED CVE-2026-18922 389-ds:1.4/389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-8.10.z]
- Resolves: RHEL-244463 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-8.10.z]
- Resolves: RHEL-245383 - EMBARGOED CVE-2026-76560 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-8.10.z]
- Resolves: RHEL-248762 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-8.10.z]

[1.4.3.39-26]
- Bump version to 1.4.3.39-26
- Resolves: RHEL-183073 - EMBARGOED CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-8.10.z]
- Resolves: RHEL-190782 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-8.10.z]
- Resolves: RHEL-210880 - EMBARGOED CVE-2026-15722 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-8.10.z]

[1.4.3.39-25]
- Bump version to 1.4.3.39-25
- Resolves: RHEL-182162 - EMBARGOED CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-8.10.z]
- Resolves: RHEL-183102 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit

[1.4.3.39-24]
- Bump version to 1.4.3.39-24
- Resolves: RHEL-170278 - Memory leaks in syncrepl plugin during persistent search operations [rhel-8.10.z]
- Resolves: RHEL-163375 - WARN - keys2idl - received NULL idl from index_read_ext_allids
- Resolves: RHEL-159306 - ns-slapd crash in libdb possible memory corruption [rhel-8.10.z]
- Resolves: RHEL-170284 - access log - suspicious wtime optime negative and large values in internal op [rhel-8.10.z]
- Resolves: RHEL-170507 - ns-slapd fails to shutdown when deferred memberof update is in progress [rhel-8.10.z]
- Resolves: RHEL-170509 - Crash in trim_changelog() during the Retro Changelog trimming [rhel-8.10.z]
- Resolves: RHEL-170514 - Possible memory leak when using the Retro Changelog plugin [rhel-8.10.z]
- Resolves: RHEL-170512 - Crash in replica_config_add when manually configuring a replica with an incorrect nsds5ReplicaRoot [rhel-8.10.z]
- Resolves: RHEL-174523 - [RFE] Add OS-level thread names to all server threads [rhel-8.10.z]
- Resolves: RHEL-170483 - test_vlv_recreation_reindex fails on LMDB [rhel-8.10.z]
- Resolves: RHEL-178076 - CVE-2026-9064 389-ds:1.4/389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-8.10.z]

[1.4.3.39-23]
- Resolves: RHEL-137074 - CVE-2025-14905 389-ds:1.4/389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-8.10.z]
- Resolves: RHEL-152098 - Scalability issue of replication online initialization with large database [rhel-8.10.z]

[1.4.3.39-22]
- Resolves: RHEL-148485 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-8.10.z]

[1.4.3.39-21]
- Resolves: RHEL-141419 - (&(cn:dn:=groups)) no longer returns results [rhel-8.10.z]
- Resolves: RHEL-140272 - ipa-healthcheck is complaining about missing or
incorrectly configured system indexes. [rhel-8.10.z]

[1.4.3.39-20]
- Resolves: RHEL-140086 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-8.10.z]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	389-ds-base-1.4.3.39-29.module+el8.10.0+91072+ee400168.src.rpm	ece1cdfcf6755951f6c92beff4621aaf8e386df431f12922c7de0e64ba82a7c7	-	ol8_aarch64_appstream
	389-ds-base-1.4.3.39-29.module+el8.10.0+91072+ee400168.aarch64.rpm	d45e7d3a1eac3e131d86343591db81289fd421785f3b4b1544d38dc65a57a444	-	ol8_aarch64_appstream
	389-ds-base-devel-1.4.3.39-29.module+el8.10.0+91072+ee400168.aarch64.rpm	088e4f5e4aedc5629ab11b6681dcccf4b73856b758246286cf42975acce643a1	-	ol8_aarch64_appstream
	389-ds-base-legacy-tools-1.4.3.39-29.module+el8.10.0+91072+ee400168.aarch64.rpm	d06369df4dd1c226a997a01749d1306c47d32db257265edf81ff1e6c655c9652	-	ol8_aarch64_appstream
	389-ds-base-libs-1.4.3.39-29.module+el8.10.0+91072+ee400168.aarch64.rpm	51b2bfa24d8b9a89462e3990d997b2d6a0818e12299214f4b9d435a82602a9e2	-	ol8_aarch64_appstream
	389-ds-base-snmp-1.4.3.39-29.module+el8.10.0+91072+ee400168.aarch64.rpm	3e97f94737c1e5034f04f9a86967ad0cac9f10681ec1bd0a0d6860a38886d275	-	ol8_aarch64_appstream
	python3-lib389-1.4.3.39-29.module+el8.10.0+91072+ee400168.noarch.rpm	5c9e5078efa64accf3fca60f9942d6faf080493ad238a1cd8c532f5fd899e35a	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	389-ds-base-1.4.3.39-29.module+el8.10.0+91072+ee400168.src.rpm	ece1cdfcf6755951f6c92beff4621aaf8e386df431f12922c7de0e64ba82a7c7	-	ol8_x86_64_appstream
	389-ds-base-1.4.3.39-29.module+el8.10.0+91072+ee400168.x86_64.rpm	297ae6d2b0e3f98815f2a5cd128405a94aa73d28f9975cf4530c2ef431437cd1	-	ol8_x86_64_appstream
	389-ds-base-devel-1.4.3.39-29.module+el8.10.0+91072+ee400168.x86_64.rpm	ef2a722dc0a67bb8f7632f8adf22c0f42f736571d9d6f8590af9ef5da2cc86a8	-	ol8_x86_64_appstream
	389-ds-base-legacy-tools-1.4.3.39-29.module+el8.10.0+91072+ee400168.x86_64.rpm	b83dc0608feaeaf5058b143f7e65d4fca2624e23b0d5ba4d9c5f136daaa92aa8	-	ol8_x86_64_appstream
	389-ds-base-libs-1.4.3.39-29.module+el8.10.0+91072+ee400168.x86_64.rpm	11b28e00acbf59d3b5cab0dc079770cfb618ccd3a59e894ac53b738ad8709109	-	ol8_x86_64_appstream
	389-ds-base-snmp-1.4.3.39-29.module+el8.10.0+91072+ee400168.x86_64.rpm	5ed813347e8fe2a10ce05ff3205b5d35183fffd1de4fdaf6009d191dbe49f834	-	ol8_x86_64_appstream
	python3-lib389-1.4.3.39-29.module+el8.10.0+91072+ee400168.noarch.rpm	5c9e5078efa64accf3fca60f9942d6faf080493ad238a1cd8c532f5fd899e35a	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team