[El-errata] ELSA-2026-36195 Important: Oracle Linux 9 389-ds-base security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-36195

http://linux.oracle.com/errata/ELSA-2026-36195.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
389-ds-base-2.8.0-8.el9_8.x86_64.rpm
389-ds-base-devel-2.8.0-8.el9_8.x86_64.rpm
389-ds-base-libs-2.8.0-8.el9_8.x86_64.rpm
389-ds-base-snmp-2.8.0-8.el9_8.x86_64.rpm
python3-lib389-2.8.0-8.el9_8.noarch.rpm

aarch64:
389-ds-base-2.8.0-8.el9_8.aarch64.rpm
389-ds-base-devel-2.8.0-8.el9_8.aarch64.rpm
389-ds-base-libs-2.8.0-8.el9_8.aarch64.rpm
389-ds-base-snmp-2.8.0-8.el9_8.aarch64.rpm
python3-lib389-2.8.0-8.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/389-ds-base-2.8.0-8.el9_8.src.rpm

Related CVEs:

CVE-2026-11610
CVE-2026-11774




Description of changes:

[2.8.0-8]
- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]