gpp_maybe Security update for 389-ds

SUSE-SLE-Module-Server-Applications-15-SP7-2026-3138

This update for 389-ds fixes the following issues - Update to version 2.7.0~git212.9b0755edb. - CVE-2026-11610: heap buffer overflow in `sasl_io_recv()` via padded SASL UNBIND (bsc#1270695). - CVE-2026-11611: content synchronization persistent search plugin can allow unbounded memory growth (bsc#1267975). - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure (bsc#1268065). - CVE-2026-11786: lack of length check can cause an out-of-bounds read (bsc#1268064). - CVE-2026-11787: lack of bounds check can lead to a heap buffer overread (bsc#1268062). - CVE-2026-11788: lack of allocation failure check can lead to NULL pointer dereference (bsc#1268057). - CVE-2026-11789: crafted SMD5 hash can lead to an integer underflow (bsc#1268058). - CVE-2026-11790: crafted password hash can cause excessive CPU consumption (bsc#1268060). - CVE-2026-11791: schema reload triggered during concurrent LDAP query traffic can lead to a use-after-free (bsc#1268047). - CVE-2026-11792: password value shorter than 23 characters can cause a heap buffer overflow (bsc#1268046). - CVE-2026-11793: crafted `nsDS5ReplicaCredentials` can lead to a stack buffer overflow (bsc#1268041). - CVE-2026-11884: remote code execution and denial of service via heap buffer overflow (bsc#1268115). - CVE-2026-12528: heap buffer overflows in `__aclp__normalize_acltxt()` (bsc#1268491).

• Release Date
  Jul 20 2026
• References
  Bugzilla: 1267975, 1268041, 1268046, 1268047, 1268057, 1268058, 1268060, 1268062, 1268064, 1268065, 1268115, 1268298, 1268491, 1269120, 1270695
  CVEs: CVE-2026-11610, CVE-2026-11611, CVE-2026-11774, CVE-2026-11785, CVE-2026-11786, CVE-2026-11787, CVE-2026-11788, CVE-2026-11789, CVE-2026-11790, CVE-2026-11791, CVE-2026-11792, CVE-2026-11793, CVE-2026-11884, CVE-2026-12528
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 s390x

• Packages
  389-ds
  389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm lock src

  389-ds-devel
  Development files for the 389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  lib389
  389 Directory Server administration tools and library

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  libsvrcore0
  Secure PIN handling using NSS crypto

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

Server Applications Module 15.7 ppc64le

• Packages
  389-ds
  389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm lock src

  389-ds-devel
  Development files for the 389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  lib389
  389 Directory Server administration tools and library

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  libsvrcore0
  Secure PIN handling using NSS crypto

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

Server Applications Module 15.7 aarch64

• Packages
  389-ds
  389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm lock src

  389-ds-devel
  Development files for the 389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  lib389
  389 Directory Server administration tools and library

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  libsvrcore0
  Secure PIN handling using NSS crypto

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

Server Applications Module 15.7 x86_64

• Packages
  389-ds
  389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm lock src

  389-ds-devel
  Development files for the 389 Directory Server

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  lib389
  389 Directory Server administration tools and library

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm

  libsvrcore0
  Secure PIN handling using NSS crypto

  2.7.0~git212.9b0755edb-150700.3.19.1 lock rpm