Critical Vulnerabilities in Oracle Linux 9 and 10 389-ds Resolved

Critical Vulnerabilities in Oracle Linux 9 and 10 389-ds Resolved

First seen 25 Feb 2026, 06:09 UTC Linuxsecurity 18.3

Article Content

Browse articles
ThreatCluster

Oracle has released updates for 389-ds in both Oracle Linux 9 and 10 to address several vulnerabilities. Notably, CVE-2025-14905, a remote code execution and denial of service vulnerability, was published on February 23, 2026. Other issues resolved include high CPU usage and replication problems in large databases.

Timeline

2026-02-23
CVE-2025-14905 published
2026-02-24
Oracle Linux 10 ELSA-2026-3208 released
2026-02-24
Oracle Linux 9 ELSA-2026-3189 released