ELSA-2026-55423

ELSA-2026-55423 - 389-ds-base security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-17

Description

[2.8.0-9]
- Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z]
- Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z]
- Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z]

Related CVEs

CVE-2026-11770

CVE-2026-11788

CVE-2026-15722

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	389-ds-base-2.8.0-9.el9_8.src.rpm	0e9fe11d7179fe79d0bf7a8e2f2fd87a7a4c7c2372782fb405cec274ca992443	-	ol9_aarch64_appstream
	389-ds-base-2.8.0-9.el9_8.src.rpm	0e9fe11d7179fe79d0bf7a8e2f2fd87a7a4c7c2372782fb405cec274ca992443	-	ol9_aarch64_codeready_builder
	389-ds-base-2.8.0-9.el9_8.aarch64.rpm	0338ea257d0ce783c1c890959479a2e5a6a8a530896b31a978a3d9393be9c0e7	-	ol9_aarch64_appstream
	389-ds-base-devel-2.8.0-9.el9_8.aarch64.rpm	dd172b723d2e63305bb8d89e867f1dafd030ed63dcd1e69208d43d931a0c439b	-	ol9_aarch64_codeready_builder
	389-ds-base-libs-2.8.0-9.el9_8.aarch64.rpm	2e1dab843437079df73d05d8e0a3cfd76dab2b7b359c29335a01b88034aabb01	-	ol9_aarch64_appstream
	389-ds-base-snmp-2.8.0-9.el9_8.aarch64.rpm	0c2dfc90ef8ab25befb5f9b6c7e8ada34f582fdbea28e134621d670015557962	-	ol9_aarch64_appstream
	python3-lib389-2.8.0-9.el9_8.noarch.rpm	270d978b6fc75bd4280d49f10598d5123df3928b93d3d04122b170cd78873113	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	389-ds-base-2.8.0-9.el9_8.src.rpm	0e9fe11d7179fe79d0bf7a8e2f2fd87a7a4c7c2372782fb405cec274ca992443	-	ol9_x86_64_appstream
	389-ds-base-2.8.0-9.el9_8.src.rpm	0e9fe11d7179fe79d0bf7a8e2f2fd87a7a4c7c2372782fb405cec274ca992443	-	ol9_x86_64_codeready_builder
	389-ds-base-2.8.0-9.el9_8.x86_64.rpm	8a590f880df72c5b679f579a6c726af295850b4ec20282068b41e4eeffe24895	-	ol9_x86_64_appstream
	389-ds-base-devel-2.8.0-9.el9_8.x86_64.rpm	d3f90725809a718df41e1c085cfc644c47cf4653e461d62296be484a95a9a721	-	ol9_x86_64_codeready_builder
	389-ds-base-libs-2.8.0-9.el9_8.x86_64.rpm	3c3b642c2064b85d3279dc18a4dc0e7095f1c30aaa78cfb95e340c87f0558eac	-	ol9_x86_64_appstream
	389-ds-base-snmp-2.8.0-9.el9_8.x86_64.rpm	4ac6818650558f1ef81c71c75fbee1f6201c8428b67c29ac1ce9637af2ac5314	-	ol9_x86_64_appstream
	python3-lib389-2.8.0-9.el9_8.noarch.rpm	270d978b6fc75bd4280d49f10598d5123df3928b93d3d04122b170cd78873113	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team