ELSA-2026-36195

ELSA-2026-36195 - 389-ds-base security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-07

Description

[2.8.0-8]
- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]

Related CVEs

CVE-2026-11610

CVE-2026-11774

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	389-ds-base-2.8.0-8.el9_8.src.rpm	0eb764c3d2c0a936be48a525377794e5e7b97972fa9d8c623ecb635460304ced	-	ol9_aarch64_appstream
	389-ds-base-2.8.0-8.el9_8.src.rpm	0eb764c3d2c0a936be48a525377794e5e7b97972fa9d8c623ecb635460304ced	-	ol9_aarch64_codeready_builder
	389-ds-base-2.8.0-8.el9_8.aarch64.rpm	e55affe5f0d146fa6571b573dd1ae948469afde7a76e6fff3c632113c9b23f9a	-	ol9_aarch64_appstream
	389-ds-base-devel-2.8.0-8.el9_8.aarch64.rpm	411a4e767d8f7c73013a467400559b110deb67cc3f2ffee9bd83d4154ccddcf9	-	ol9_aarch64_codeready_builder
	389-ds-base-libs-2.8.0-8.el9_8.aarch64.rpm	212e3e5bf045788901f2282611130b903e425fbff2aa90db7315aa10c3cb41ce	-	ol9_aarch64_appstream
	389-ds-base-snmp-2.8.0-8.el9_8.aarch64.rpm	189a00543847fd29d5503f9e170dfae68a461f76b91a08a759966d2183e42f83	-	ol9_aarch64_appstream
	python3-lib389-2.8.0-8.el9_8.noarch.rpm	e7847ebbcec32aec3d165a78b6a8455f2c0af4d5113bd12189c94bcf1050a014	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	389-ds-base-2.8.0-8.el9_8.src.rpm	0eb764c3d2c0a936be48a525377794e5e7b97972fa9d8c623ecb635460304ced	-	ol9_x86_64_appstream
	389-ds-base-2.8.0-8.el9_8.src.rpm	0eb764c3d2c0a936be48a525377794e5e7b97972fa9d8c623ecb635460304ced	-	ol9_x86_64_codeready_builder
	389-ds-base-2.8.0-8.el9_8.x86_64.rpm	96ef331e7e39ad4d05b3b3456821a7afd5e22ed132e488869d4cfe6888046daf	-	ol9_x86_64_appstream
	389-ds-base-devel-2.8.0-8.el9_8.x86_64.rpm	d529eacc9496a51af152fb928c56b901efcc2df8ce5480d37b08281617a2cfdb	-	ol9_x86_64_codeready_builder
	389-ds-base-libs-2.8.0-8.el9_8.x86_64.rpm	c91d39c2bd062d1659744bdacae7efff3e946dbb0edf9cfb53b1f79c16b607c6	-	ol9_x86_64_appstream
	389-ds-base-snmp-2.8.0-8.el9_8.x86_64.rpm	c514732d43b0d26808be9e0a34da33bfe5a63d13474411fc0e282563a10b3eb5	-	ol9_x86_64_appstream
	python3-lib389-2.8.0-8.el9_8.noarch.rpm	e7847ebbcec32aec3d165a78b6a8455f2c0af4d5113bd12189c94bcf1050a014	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team