ELSA-2026-26455

ELSA-2026-26455 - 389-ds-base security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-23

Description

[2.8.0-7]
- Resolves: RHEL-152356 - Getting 'build_candidate_list - Database error 11' messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option '-s' [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]

Related CVEs

CVE-2026-9064

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	389-ds-base-2.8.0-7.el9_8.src.rpm	606f295664fe971e43ce53f2cf86eb3a2ad0f7bba2ad2138d0939e0910c9def7	-	ol9_aarch64_appstream
	389-ds-base-2.8.0-7.el9_8.src.rpm	606f295664fe971e43ce53f2cf86eb3a2ad0f7bba2ad2138d0939e0910c9def7	-	ol9_aarch64_codeready_builder
	389-ds-base-2.8.0-7.el9_8.aarch64.rpm	0b57648f3d89fa32b4fe9f826c33923fad26c4d89becb999bf5624f6e2a961b0	-	ol9_aarch64_appstream
	389-ds-base-devel-2.8.0-7.el9_8.aarch64.rpm	510915614ce1af5fa58f8b2c301bbf4c7cdc5816347742ec9f28b5bd118047cf	-	ol9_aarch64_codeready_builder
	389-ds-base-libs-2.8.0-7.el9_8.aarch64.rpm	6d9c4cd1f24c53cc4c1f80e2ace79e7cce12fe448dae27322e98c2812add3d59	-	ol9_aarch64_appstream
	389-ds-base-snmp-2.8.0-7.el9_8.aarch64.rpm	a1aea9bdc3f73a85044eda6e972bb9d87b6de563a61c140e54534c5ba35f4372	-	ol9_aarch64_appstream
	python3-lib389-2.8.0-7.el9_8.noarch.rpm	7419c130f92abbec1359d0c9f1b7025b67104840d0323bf600d9f419841b8d07	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	389-ds-base-2.8.0-7.el9_8.src.rpm	606f295664fe971e43ce53f2cf86eb3a2ad0f7bba2ad2138d0939e0910c9def7	-	ol9_x86_64_appstream
	389-ds-base-2.8.0-7.el9_8.src.rpm	606f295664fe971e43ce53f2cf86eb3a2ad0f7bba2ad2138d0939e0910c9def7	-	ol9_x86_64_codeready_builder
	389-ds-base-2.8.0-7.el9_8.x86_64.rpm	aed8b0ac311e081124d793cf784c7da669a8c77f160cd95ae1bcb136ce62b6c9	-	ol9_x86_64_appstream
	389-ds-base-devel-2.8.0-7.el9_8.x86_64.rpm	7412f052e88f0de8bd94963a642cc95a983984d8d9153ae82210c135486a6fae	-	ol9_x86_64_codeready_builder
	389-ds-base-libs-2.8.0-7.el9_8.x86_64.rpm	ec8305df07e7132135e5f93c5a3b04c96b670218e11690e79eebbe38ab54a652	-	ol9_x86_64_appstream
	389-ds-base-snmp-2.8.0-7.el9_8.x86_64.rpm	1471abce76724a83fbf6468466bd090e9fb415b54eb277ea1e7a37c911ff2a8b	-	ol9_x86_64_appstream
	python3-lib389-2.8.0-7.el9_8.noarch.rpm	7419c130f92abbec1359d0c9f1b7025b67104840d0323bf600d9f419841b8d07	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team