Release date:
2026-09-17 14:20:32 UTC
Description:
- CVE-2026-18355: reject SASL packet lengths below the already-consumed offset in sasl_io_start_packet
- CVE-2026-18453: avoid NULL pointer dereference in op_shared_search with paged results and USE_ONE_BACKEND
- CVE-2026-18922: clear the stale SASL identity in the Cyrus SASL auxiliary property lookup
- CVE-2026-76560: require a non-empty bind DN when evaluating SELFDN ACI bind rules
- CVE-2026-78701: drain a buffered unencrypted UNBIND across recv calls instead of stalling the connection
Updated packages:
-
389-ds-base-2.2.4-5.el9_2.tuxcare.els10.x86_64.rpm
sha:7a680a831047fc2b38e0bd6b4ff1325afeb5eb917dc41e9a0d10fff6fdf7a8a4
-
389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els10.x86_64.rpm
sha:f4218ef32d61f5b1a34cf28ee244beba7df27e4d2992fb636c0fe7964c78fa32
-
389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els10.x86_64.rpm
sha:b459aa1779665a378b554ac029f1b0df3b6679eca63a1b9b9efe4501e36182d0
-
389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els10.x86_64.rpm
sha:5c2dff2e861f7b146149b2a1206f5a27b97946ff0dcb6f05d9198c54ca49494d
-
python3-lib389-2.2.4-5.el9_2.tuxcare.els10.noarch.rpm
sha:5057ebc82e6d9fb3c758b63e05323794c592d7e3e613a5e97de2a7704cb7aabb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
