[389-users] Security updates required for recent 389 Directory Server releases

Hello,

The 389 Directory Server team published security updates for multiple release branches:

- 3.3.1 (https://www.port389.org/docs/389ds/releases/release-3-3-1.html)
- 3.2.3 (https://www.port389.org/docs/389ds/releases/release-3-2-3.html)
- 3.1.5 (https://www.port389.org/docs/389ds/releases/release-3-1-5.html)
- 3.0.7 (https://www.port389.org/docs/389ds/releases/release-3-0-7.html)
- 2.9.1 (https://www.port389.org/docs/389ds/releases/release-2-9-1.html)
- 2.8.2 (https://www.port389.org/docs/389ds/releases/release-2-8-2.html)
- 2.6.3 (https://www.port389.org/docs/389ds/releases/release-2-6-3.html)
- 2.4.7 (https://www.port389.org/docs/389ds/releases/release-2-4-7.html)
- 2.2.11 (https://www.port389.org/docs/389ds/releases/release-2-2-11.html)
- 1.4.3.41 (https://www.port389.org/docs/389ds/releases/release-1-4-3-41.html)

These releases address multiple security vulnerabilities, including remotely exploitable issues such as:
- CVE-2026-18922 - 9.8 Critical
- CVE-2026-19843 - 8.4 Important
- CVE-2026-11770 - 7.5 Moderate
- CVE-2026-18355 - 7.5 Important
- CVE-2026-18453 - 7.5 Important
- CVE-2026-76560 - 7.5 Important
- CVE-2026-9064 - 7.5 Important

Please treat this as a critical security update. Review your installed version and upgrade to the latest applicable release as soon as possible.

Regards,
The 389 Directory Server team

-- _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new