[El-errata] ELSA-2026-55424 Important: Oracle Linux 10 389-ds-base security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-55424

http://linux.oracle.com/errata/ELSA-2026-55424.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
389-ds-base-3.2.0-9.el10_2.x86_64.rpm
389-ds-base-bdb-3.2.0-9.el10_2.x86_64.rpm
389-ds-base-devel-3.2.0-9.el10_2.x86_64.rpm
389-ds-base-libs-3.2.0-9.el10_2.x86_64.rpm
389-ds-base-snmp-3.2.0-9.el10_2.x86_64.rpm
python3-lib389-3.2.0-9.el10_2.noarch.rpm

aarch64:
389-ds-base-3.2.0-9.el10_2.aarch64.rpm
389-ds-base-bdb-3.2.0-9.el10_2.aarch64.rpm
389-ds-base-devel-3.2.0-9.el10_2.aarch64.rpm
389-ds-base-libs-3.2.0-9.el10_2.aarch64.rpm
389-ds-base-snmp-3.2.0-9.el10_2.aarch64.rpm
python3-lib389-3.2.0-9.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/389-ds-base-3.2.0-9.el10_2.src.rpm

Related CVEs:

CVE-2026-11770
CVE-2026-11788
CVE-2026-15722




Description of changes:

[3.2.0-9]
- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]