[CLSA-2026:1792597970] 389-ds-base: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 15:53:02 UTC
Description:
- CVE-2026-86345: reject StartTLS when plaintext data is buffered after the request - CVE-2026-86344: fix worker pool exhaustion via partial LDAP messages
CVEs fixed:
Updated packages:
  • 389-ds-base-2.2.4-5.el9_2.tuxcare.els11.aarch64.rpm
    sha:fa2686ad150a1e25739fa340d6ae07591453a60bdcd1b0c652c89a8f540a5aaf
  • 389-ds-base-2.2.4-5.el9_2.tuxcare.els11.x86_64.rpm
    sha:5ebd449453850a925ed60771326eb29588199bd9b4aca06659ae602583720953
  • 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els11.aarch64.rpm
    sha:d40798d8a684d90f4c1786cf64aaf75ae3f9eb2fdbe8fb10d791d4e7a13ab74f
  • 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els11.x86_64.rpm
    sha:ff881f6d33b79b9725bba5906b76e2a431a5628888485cccb32736ad21060276
  • 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els11.aarch64.rpm
    sha:bb47785a83d9814e345e49b313e49978296c30f55e411478be1808e308dbc9f4
  • 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els11.x86_64.rpm
    sha:c4415ff58296aac889e6c50aba0fb426dc03437ae0aaf7b5a6973e3b9c568152
  • 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els11.aarch64.rpm
    sha:ec6133308305e5fb8a3d70a4dff8fda7491ab40c5e4cbe336f96bf71dfaa22b9
  • 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els11.x86_64.rpm
    sha:fab7384e7d133a7c0118a2e2c1d5a77987e1b84a2a36e9d277775579c4db36d3
  • python3-lib389-2.2.4-5.el9_2.tuxcare.els11.noarch.rpm
    sha:7d930a7f349554753fd6e89c4ad94291a95d74ac46d5bf8787f4642367096c69
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.