CLSA-2026-1789580964

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1789580964.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1789580964
Upstream
CVE (4)
  • CVE-2026-18355
  • CVE-2026-18453
  • CVE-2026-18922
  • CVE-2026-76560
Published
2026-09-16T17:49:37Z
Modified
2026-10-26T09:43:21Z
Summary
389-ds-base: Fix of 4 CVEs
Details
  • CVE-2026-18922: reset the SASL auxprop context after a failed one-shot bind so a stale canon_user identity cannot be inherited by a later successful bind
  • CVE-2026-18355: validate the minimum SASL packet length in sasl_io_start_packet to prevent an unsigned underflow in sasl_io_read_packet
  • CVE-2026-76560: reject anonymous clients before evaluating the SELFDN, USERDNATTR and LDAPURL ACI bind rules
  • CVE-2026-18453: check the paged-results backend pointer for NULL before reusing a slot in op_shared_search
References

Affected packages

TuxCare:AlmaLinux:9.6
389-ds-base

Package

Name
389-ds-base
Purl
pkg:rpm/tuxcare/389-ds-base?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1789580964.json"
389-ds-base-devel

Package

Name
389-ds-base-devel
Purl
pkg:rpm/tuxcare/389-ds-base-devel?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1789580964.json"
389-ds-base-libs

Package

Name
389-ds-base-libs
Purl
pkg:rpm/tuxcare/389-ds-base-libs?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1789580964.json"
389-ds-base-snmp

Package

Name
389-ds-base-snmp
Purl
pkg:rpm/tuxcare/389-ds-base-snmp?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1789580964.json"
python3-lib389

Package

Name
python3-lib389
Purl
pkg:rpm/tuxcare/python3-lib389?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.1-12.el9_6.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1789580964.json"