ELSA-2026-55424

ELSA-2026-55424 - 389-ds-base security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-17

Description

[3.2.0-9]
- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
authentication stack buffer overflow in get_ruvelement_from_berval() via
unbounded replica ID parsing [rhel-10.2.z]

Related CVEs

CVE-2026-11770

CVE-2026-11788

CVE-2026-15722

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	389-ds-base-3.2.0-9.el10_2.src.rpm	f432bf19837a9f73519596f66ee0077c43fe29ba4ae9e9fb5326e9930a828c38	-	ol10_aarch64_appstream
	389-ds-base-3.2.0-9.el10_2.src.rpm	f432bf19837a9f73519596f66ee0077c43fe29ba4ae9e9fb5326e9930a828c38	-	ol10_aarch64_codeready_builder
	389-ds-base-3.2.0-9.el10_2.aarch64.rpm	bf018427d1b2228a67afc6d632644215f35d121da0f3f4faa4a856fe6cefc8de	-	ol10_aarch64_appstream
	389-ds-base-bdb-3.2.0-9.el10_2.aarch64.rpm	f523289f7e612eea82917057b1d961f92eaeb26341d74b20c28820809bdcd95e	-	ol10_aarch64_codeready_builder
	389-ds-base-devel-3.2.0-9.el10_2.aarch64.rpm	b4cf16b6acaeb11b136c2850da6e5b1cf310af9f2a63ab4afa72b1d3c4f167fe	-	ol10_aarch64_codeready_builder
	389-ds-base-libs-3.2.0-9.el10_2.aarch64.rpm	5b03b4acc84b10a96a61a7c8b9115f7c38dd3a96e1a142dd44ff65d0d8d3d4af	-	ol10_aarch64_appstream
	389-ds-base-snmp-3.2.0-9.el10_2.aarch64.rpm	cccf241c9a915a7ab2afeb7746759aee7e73081037b5f7de0b633981e3f51004	-	ol10_aarch64_appstream
	python3-lib389-3.2.0-9.el10_2.noarch.rpm	6ea4b8fd8ef27c7fa3dea83c66039ec41ad56b505c4aafde8afd3feb689bae82	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	389-ds-base-3.2.0-9.el10_2.src.rpm	f432bf19837a9f73519596f66ee0077c43fe29ba4ae9e9fb5326e9930a828c38	-	ol10_x86_64_appstream
	389-ds-base-3.2.0-9.el10_2.src.rpm	f432bf19837a9f73519596f66ee0077c43fe29ba4ae9e9fb5326e9930a828c38	-	ol10_x86_64_codeready_builder
	389-ds-base-3.2.0-9.el10_2.x86_64.rpm	ec065ac3e9edc8f9b2c1f53a5370358ed42dd5585b0e9ead70ba08af9985adce	-	ol10_x86_64_appstream
	389-ds-base-bdb-3.2.0-9.el10_2.x86_64.rpm	52a72b16553896d7b8afcc8bee69448a3d48a03ccb8d53756b6f585abbf52406	-	ol10_x86_64_codeready_builder
	389-ds-base-devel-3.2.0-9.el10_2.x86_64.rpm	b82b7b944edf8bd5dfed1e41ce354a44b315d43f2a2ecdcc92415a9f3b8c8f04	-	ol10_x86_64_codeready_builder
	389-ds-base-libs-3.2.0-9.el10_2.x86_64.rpm	9018b9cb90b707469ced770f1ae5c942f4f25ed14db217d631343b2fe567adba	-	ol10_x86_64_appstream
	389-ds-base-snmp-3.2.0-9.el10_2.x86_64.rpm	3bbdd4c8230c4c40a74f838cf9364dcbb60c16f849a5d8d44091aa50c7133ffb	-	ol10_x86_64_appstream
	python3-lib389-3.2.0-9.el10_2.noarch.rpm	6ea4b8fd8ef27c7fa3dea83c66039ec41ad56b505c4aafde8afd3feb689bae82	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team