Release date:
2026-09-16 17:49:37 UTC
Description:
- CVE-2026-18922: reset the SASL auxprop context after a failed one-shot bind so a
stale canon_user identity cannot be inherited by a later successful bind
- CVE-2026-18355: validate the minimum SASL packet length in sasl_io_start_packet to
prevent an unsigned underflow in sasl_io_read_packet
- CVE-2026-76560: reject anonymous clients before evaluating the SELFDN, USERDNATTR
and LDAPURL ACI bind rules
- CVE-2026-18453: check the paged-results backend pointer for NULL before reusing a
slot in op_shared_search
Updated packages:
-
389-ds-base-2.6.1-12.el9_6.tuxcare.els5.x86_64.rpm
sha:f428df2a8723098d8fee8e3f48568b54aea64ad4b2aebd3405e38ffb724ea435
-
389-ds-base-devel-2.6.1-12.el9_6.tuxcare.els5.x86_64.rpm
sha:c89abc588e07794e4c0093254492cbcf9cc89b23f8379933622c8277c45ff895
-
389-ds-base-libs-2.6.1-12.el9_6.tuxcare.els5.x86_64.rpm
sha:1f68164e980f193ba2dc3b097aef8aa3e6b94351074a78b21af11a0ef91ed123
-
389-ds-base-snmp-2.6.1-12.el9_6.tuxcare.els5.x86_64.rpm
sha:aa6c06216ddadbd8b17e79a9e0e01dfecd82c5d61fe262af86d3e23d4fd0363f
-
python3-lib389-2.6.1-12.el9_6.tuxcare.els5.noarch.rpm
sha:eb569d5a09f6fd1002206fecb62a002e870a35ad120f3de20416e6b2ed8f9d87
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
