{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-18922: reset the SASL auxprop context after a failed one-shot bind so a\n stale canon_user identity cannot be inherited by a later successful bind\n- CVE-2026-18355: validate the minimum SASL packet length in sasl_io_start_packet to\n prevent an unsigned underflow in sasl_io_read_packet\n- CVE-2026-76560: reject anonymous clients before evaluating the SELFDN, USERDNATTR\n and LDAPURL ACI bind rules\n- CVE-2026-18453: check the paged-results backend pointer for NULL before reusing a\n slot in op_shared_search", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.6esu/advisories/2026/clsa-2026_1789580964.json" } ], "tracking": { "current_release_date": "2026-09-16T17:50:20Z", "generator": { "date": "2026-09-16T17:50:20Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1789580964", "initial_release_date": "2026-09-16T17:50:20Z", "revision_history": [ { "date": "2026-09-16T17:50:20Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "389-ds-base: Fix of 4 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.6", "product": { "name": "AlmaLinux 9.6", "product_id": "AlmaLinux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.6", "product": { "name": "Rocky Linux 9.6", "product_id": "Rocky Linux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els5?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els5?arch=noarch" } } }, { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els4?arch=noarch" } } }, { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els3?arch=noarch" } } }, { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els1?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-18355", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire is validated only against an upper bound. A small wire length (0, 1, or 2) produces an encrypted_buffer_count below the already-consumed encrypted_buffer_offset, causing an unsigned subtraction underflow in sasl_io_read_packet(). PR_Recv is then requested to read approximately 4 GiB into a 1024-byte heap buffer, resulting in a heap buffer overflow with attacker-controlled content. After a successful SASL bind with integrity protection (SSF > 0), a remote authenticated attacker can cause a denial of service or potentially achieve remote code execution. This flaw is distinct from CVE-2026-11774, whose fix only guards against upper-bound overflow.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "known_affected": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18355" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64771", "url": "https://access.redhat.com/errata/RHSA-2026:64771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64776", "url": "https://access.redhat.com/errata/RHSA-2026:64776" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64778", "url": "https://access.redhat.com/errata/RHSA-2026:64778" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64779", "url": "https://access.redhat.com/errata/RHSA-2026:64779" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64780", "url": "https://access.redhat.com/errata/RHSA-2026:64780" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64781", "url": "https://access.redhat.com/errata/RHSA-2026:64781" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64783", "url": "https://access.redhat.com/errata/RHSA-2026:64783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64784", "url": "https://access.redhat.com/errata/RHSA-2026:64784" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64785", "url": "https://access.redhat.com/errata/RHSA-2026:64785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64789", "url": "https://access.redhat.com/errata/RHSA-2026:64789" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64790", "url": "https://access.redhat.com/errata/RHSA-2026:64790" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64791", "url": "https://access.redhat.com/errata/RHSA-2026:64791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64792", "url": "https://access.redhat.com/errata/RHSA-2026:64792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64793", "url": "https://access.redhat.com/errata/RHSA-2026:64793" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64804", "url": "https://access.redhat.com/errata/RHSA-2026:64804" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65119", "url": "https://access.redhat.com/errata/RHSA-2026:65119" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-18355", "url": "https://access.redhat.com/security/cve/CVE-2026-18355" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2509186", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509186" } ], "release_date": "2026-09-07T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-16T17:49:26.268983Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964" }, { "category": "none_available", "date": "2026-09-07T15:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-76560", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "description", "text": "A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "known_affected": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-76560" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64771", "url": "https://access.redhat.com/errata/RHSA-2026:64771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64776", "url": "https://access.redhat.com/errata/RHSA-2026:64776" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64778", "url": "https://access.redhat.com/errata/RHSA-2026:64778" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64779", "url": "https://access.redhat.com/errata/RHSA-2026:64779" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64780", "url": "https://access.redhat.com/errata/RHSA-2026:64780" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64781", "url": "https://access.redhat.com/errata/RHSA-2026:64781" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64783", "url": "https://access.redhat.com/errata/RHSA-2026:64783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64784", "url": "https://access.redhat.com/errata/RHSA-2026:64784" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64785", "url": "https://access.redhat.com/errata/RHSA-2026:64785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64789", "url": "https://access.redhat.com/errata/RHSA-2026:64789" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64790", "url": "https://access.redhat.com/errata/RHSA-2026:64790" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64791", "url": "https://access.redhat.com/errata/RHSA-2026:64791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64792", "url": "https://access.redhat.com/errata/RHSA-2026:64792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64793", "url": "https://access.redhat.com/errata/RHSA-2026:64793" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64804", "url": "https://access.redhat.com/errata/RHSA-2026:64804" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65119", "url": "https://access.redhat.com/errata/RHSA-2026:65119" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-76560", "url": "https://access.redhat.com/security/cve/CVE-2026-76560" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2519521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519521" } ], "release_date": "2026-09-07T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-16T17:49:26.268983Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964" }, { "category": "none_available", "date": "2026-09-07T14:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-18922", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "description", "text": "A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind, regardless of which SASL mechanism completes that second bind. An attacker can send a SASL PLAIN bind as cn=Directory Manager with an incorrect password, then complete a SASL ANONYMOUS bind on the same connection, causing the server to grant Directory Manager authority without any valid credentials. A variant using a valid low-privileged account's own successful bind instead of an anonymous one is also possible.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "known_affected": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18922" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64771", "url": "https://access.redhat.com/errata/RHSA-2026:64771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64776", "url": "https://access.redhat.com/errata/RHSA-2026:64776" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64778", "url": "https://access.redhat.com/errata/RHSA-2026:64778" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64779", "url": "https://access.redhat.com/errata/RHSA-2026:64779" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64780", "url": "https://access.redhat.com/errata/RHSA-2026:64780" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64781", "url": "https://access.redhat.com/errata/RHSA-2026:64781" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64783", "url": "https://access.redhat.com/errata/RHSA-2026:64783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64784", "url": "https://access.redhat.com/errata/RHSA-2026:64784" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64785", "url": "https://access.redhat.com/errata/RHSA-2026:64785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64789", "url": "https://access.redhat.com/errata/RHSA-2026:64789" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64790", "url": "https://access.redhat.com/errata/RHSA-2026:64790" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64791", "url": "https://access.redhat.com/errata/RHSA-2026:64791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64792", "url": "https://access.redhat.com/errata/RHSA-2026:64792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64793", "url": "https://access.redhat.com/errata/RHSA-2026:64793" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64804", "url": "https://access.redhat.com/errata/RHSA-2026:64804" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64811", "url": "https://access.redhat.com/errata/RHSA-2026:64811" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-18922", "url": "https://access.redhat.com/security/cve/CVE-2026-18922" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2511388", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511388" } ], "release_date": "2026-09-07T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-16T17:49:26.268983Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964" }, { "category": "none_available", "date": "2026-09-07T15:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-18453", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "known_affected": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-18453" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64771", "url": "https://access.redhat.com/errata/RHSA-2026:64771" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64776", "url": "https://access.redhat.com/errata/RHSA-2026:64776" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64778", "url": "https://access.redhat.com/errata/RHSA-2026:64778" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64779", "url": "https://access.redhat.com/errata/RHSA-2026:64779" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64780", "url": "https://access.redhat.com/errata/RHSA-2026:64780" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64781", "url": "https://access.redhat.com/errata/RHSA-2026:64781" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64783", "url": "https://access.redhat.com/errata/RHSA-2026:64783" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64784", "url": "https://access.redhat.com/errata/RHSA-2026:64784" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64785", "url": "https://access.redhat.com/errata/RHSA-2026:64785" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64789", "url": "https://access.redhat.com/errata/RHSA-2026:64789" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64790", "url": "https://access.redhat.com/errata/RHSA-2026:64790" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64791", "url": "https://access.redhat.com/errata/RHSA-2026:64791" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64792", "url": "https://access.redhat.com/errata/RHSA-2026:64792" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64793", "url": "https://access.redhat.com/errata/RHSA-2026:64793" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64804", "url": "https://access.redhat.com/errata/RHSA-2026:64804" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:65119", "url": "https://access.redhat.com/errata/RHSA-2026:65119" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-18453", "url": "https://access.redhat.com/security/cve/CVE-2026-18453" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2509696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509696" } ], "release_date": "2026-09-07T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-16T17:49:26.268983Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els5.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els5.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789580964" }, { "category": "none_available", "date": "2026-09-07T15:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els4.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }