ELSA-2026-64784-0

ELSA-2026-64784-0 - 389-ds-base security, bug fix, and enhancement update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-09-08

Description

[2.8.0-10]
- Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z]
- Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z]
- Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z]
- Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z]
- Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z]
- Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z]
- Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z]

Related CVEs

CVE-2026-18355

CVE-2026-18453

CVE-2026-18922

CVE-2026-76560

CVE-2026-78701

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	389-ds-base-2.8.0-10.el9_8.src.rpm	a95ab3d07b3fd6650ee5c7f9f2ec1aba1caaacb1ca7b77844cc1ef61107da739	-	ol9_aarch64_appstream
	389-ds-base-2.8.0-10.el9_8.src.rpm	a95ab3d07b3fd6650ee5c7f9f2ec1aba1caaacb1ca7b77844cc1ef61107da739	-	ol9_aarch64_codeready_builder
	389-ds-base-2.8.0-10.el9_8.aarch64.rpm	600b83ba9a2e72e9c6b470a6f650517c09c8ef10d3b23e5db05f1079d65e7fd0	-	ol9_aarch64_appstream
	389-ds-base-devel-2.8.0-10.el9_8.aarch64.rpm	b3522229434152371c813210aff442ced49f1a88c7ac4474465562508175e30e	-	ol9_aarch64_codeready_builder
	389-ds-base-libs-2.8.0-10.el9_8.aarch64.rpm	9b4c056417aba92893a125336d7a6a20bdde2afefd8d52e63fc2120d95854f4b	-	ol9_aarch64_appstream
	389-ds-base-snmp-2.8.0-10.el9_8.aarch64.rpm	0fc861d4b371e2eb98985b06fe25da80bfca4e52d5d0745bc7bf216f8d1fa122	-	ol9_aarch64_appstream
	python3-lib389-2.8.0-10.el9_8.noarch.rpm	58d0aa88c6cf79464bd9f4f02f9c9efb2e09d367e0c560224ffaef5ffab08da4	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	389-ds-base-2.8.0-10.el9_8.src.rpm	a95ab3d07b3fd6650ee5c7f9f2ec1aba1caaacb1ca7b77844cc1ef61107da739	-	ol9_x86_64_appstream
	389-ds-base-2.8.0-10.el9_8.src.rpm	a95ab3d07b3fd6650ee5c7f9f2ec1aba1caaacb1ca7b77844cc1ef61107da739	-	ol9_x86_64_codeready_builder
	389-ds-base-2.8.0-10.el9_8.x86_64.rpm	b20cc5b610f6c320fbdb2147bf625071d3ae94fa781942345c33c109b7177459	-	ol9_x86_64_appstream
	389-ds-base-devel-2.8.0-10.el9_8.x86_64.rpm	cf82931f284ad9d4dee271cb57062b4c800a09e125d8aa764707fb2a0db569dd	-	ol9_x86_64_codeready_builder
	389-ds-base-libs-2.8.0-10.el9_8.x86_64.rpm	0cdf1cfd5eb4c1c18e35ea7fa8d0957093753edd80efdaa5984471de5b39ed43	-	ol9_x86_64_appstream
	389-ds-base-snmp-2.8.0-10.el9_8.x86_64.rpm	1a187be21f3b9972633040938cd88258bb7d2e8cd6c8630e06671a719590bb65	-	ol9_x86_64_appstream
	python3-lib389-2.8.0-10.el9_8.noarch.rpm	58d0aa88c6cf79464bd9f4f02f9c9efb2e09d367e0c560224ffaef5ffab08da4	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team