Back Linuxsecurity

Oracle 8 ELSA-2026-64791-0 389

Linuxsecurity •LinuxSecurity Advisories • September 14, 2026

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

[1.4.3.39-28] - Bump version to 1.4.3.39-28 - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-8.10.z] - Resolves: RHEL-220511 - EMBARGOED CVE-2026-18355 389-ds:1.4/389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-8.10.z] - Resolves: RHEL-232864 - EMBARGOED CVE-2026-18922 389-ds:1.4/389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-8.10.z] - Resolves: RHEL-244463 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-8.10.z] - Resolves: RHEL-245383 - EMBARGOED CVE-2026-76560 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-8.10.z] - Resolves: RHEL-248762 - CVE-2026-11770 f...

389-ds-base-1.4.3.39-28.module+el8.10.0+91024+7bf29691.x86_64.rpm 389-ds-base-devel-1.4.3.39-28.module+el8.10.0+91024+7bf29691.x86_64.rpm 389-ds-base-legacy-tools-1.4.3.39-28.module+el8.10.0+91024+7bf29691.x86_64.rpm 389-ds-base-libs-1.4.3.39-28.module+el8.10.0+91024+7bf29691.x86_64.rpm 389-ds-base-snmp-1.4.3.39-28.module+el8.10.0+91024+7bf29691.x86_64.rpm python3-lib389-1.4.3.39-28.module+el8.10.0+91024+7bf29691.noarch.rpm

389-ds-base-1.4.3.39-28.module+el8.10.0+91024+7bf29691.aarch64.rpm 389-ds-base-devel-1.4.3.39-28.module+el8.10.0+91024+7bf29691.aarch64.rpm 389-ds-base-legacy-tools-1.4.3.39-28.module+el8.10.0+91024+7bf29691.aarch64.rpm 389-ds-base-libs-1.4.3.39-28.module+el8.10.0+91024+7bf29691.aarch64.rpm 389-ds-base-snmp-1.4.3.39-28.module+el8.10.0+91024+7bf29691.aarch64.rpm python3-lib389-1.4.3.39-28.module+el8.10.0+91024+7bf29691.noarch.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Linux Security Updates Address Critical Vulnerabilities Oracle has released multiple security updates for its Linux distributions, addressing several critical vulnerabilities. Key updates include patches for CVE-2026-59090 and CVE-2026-18301 in GIMP, and multiple CVEs in FreeRDP, libssh, and Grafana. Affected systems include Oracle Linux 8, 9, and 10, with vulnerabilities allowing for potential remote code execution and privilege escalation. The updates also resolve issues related to file handling and email verification in Grafana. Administrators are urged to apply these patches promptly to mitigate risks. The updates were published on September 3, 2026, and are part of ongoing efforts to maintain system security. Specific CVEs include CVE-2026-55194, CVE-2026-67288, and CVE-2026-18300, among others. 65 sources 46

Extracted Entities

Oracle 8 ELSA-2026-64791-0 389

The full story

Extracted Entities

CVEs (5)

CWE Weaknesses (4)

MITRE ATT&CK (1)

Platforms (1)