CLSA-2026-1787306784

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787306784.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787306784
Upstream
CVE (3)
  • CVE-2026-11770
  • CVE-2026-11788
  • CVE-2026-15722
Published
2026-08-21T10:06:36Z
Modified
2026-10-26T09:31:30Z
Summary
389-ds-base: Fix of 3 CVEs
Details
  • CVE-2026-11770: require an authorised replication bind DN for the CleanAllRUV extended operations and reject unexpected filters in the check-status payload
  • CVE-2026-11788: check the result of ber_init() before use in the deref control plugin to avoid a NULL pointer dereference
  • CVE-2026-15722: bound the replica id copy in get_ruvelement_from_berval to prevent a stack buffer overflow
References

Affected packages

TuxCare:AlmaLinux:9.6
389-ds-base

Package

Name
389-ds-base
Purl
pkg:rpm/tuxcare/389-ds-base?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787306784.json"
389-ds-base-devel

Package

Name
389-ds-base-devel
Purl
pkg:rpm/tuxcare/389-ds-base-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787306784.json"
389-ds-base-libs

Package

Name
389-ds-base-libs
Purl
pkg:rpm/tuxcare/389-ds-base-libs?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787306784.json"
389-ds-base-snmp

Package

Name
389-ds-base-snmp
Purl
pkg:rpm/tuxcare/389-ds-base-snmp?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787306784.json"
python3-lib389

Package

Name
python3-lib389
Purl
pkg:rpm/tuxcare/python3-lib389?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1787306784.json"