[ALSA-2026:36196] Important: 389-ds-base security update
Type:
security
Severity:
important
Release date:
2026-07-21
Description:
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) * 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 389-ds-base-bdb-3.2.0-8.el10_2.aarch64.rpm 26bc960cac7ce41a0ecd4ef392376cca42435e9171fd852ba1a4a0db70de7c1a
aarch64 389-ds-base-libs-3.2.0-8.el10_2.aarch64.rpm 581fe74e22f1ce5f06cba17152abe7167c565798a133184d1d2f24b8ff4004f9
aarch64 389-ds-base-3.2.0-8.el10_2.aarch64.rpm c6df13a192b214345b68e492873dd1eb159db79617ff43716116bf3aa1e3d743
aarch64 389-ds-base-snmp-3.2.0-8.el10_2.aarch64.rpm d334c173b70254c51d9c3fce8abb1c764b38f274663f191b88323fb8e8eaada9
aarch64 389-ds-base-devel-3.2.0-8.el10_2.aarch64.rpm eeef5b6234f39a5ef6c9881c384c499dbf15641db02d2dd14e3a493e4c47409b
noarch python3-lib389-3.2.0-8.el10_2.noarch.rpm db8acba0242228f0760021708fbba6f09ec6c3ed8b57470de69e594a8a184aa0
ppc64le 389-ds-base-3.2.0-8.el10_2.ppc64le.rpm 1360b2e0f6f6d4c6d798f17d02067019dbd3b26b16b49add2d414935490237c0
ppc64le 389-ds-base-devel-3.2.0-8.el10_2.ppc64le.rpm 83ff180bf30206278bc4fba37fd9d69a5e5a34d916757ebc2770f49c169e93dd
ppc64le 389-ds-base-libs-3.2.0-8.el10_2.ppc64le.rpm cbe467c30246b2f9570a6210a37afe527487b9f3810628f03fdf0efb27ac0e8e
ppc64le 389-ds-base-bdb-3.2.0-8.el10_2.ppc64le.rpm e528601b24cb9a5338ca495158af2f28ad76a2b7dac640c317c4f16b2f22e8cf
ppc64le 389-ds-base-snmp-3.2.0-8.el10_2.ppc64le.rpm f74e0e683d583ade2435f218b1d4cf56feed2d5dfd3021a0913416bf5fc7cbf8
s390x 389-ds-base-devel-3.2.0-8.el10_2.s390x.rpm 90aac07c024f93249481e0a6214006a65c50e96745921abb1862aef0aed86fdc
s390x 389-ds-base-3.2.0-8.el10_2.s390x.rpm 9a40390a3f475fe2afc08117c45c805a5803a455e4e1456803bd7163e8d3b10d
s390x 389-ds-base-snmp-3.2.0-8.el10_2.s390x.rpm c2f7d7359a557719c3c77b0261d1b2a1e7ef03cb4bdb35b63d130e7ad459414d
s390x 389-ds-base-bdb-3.2.0-8.el10_2.s390x.rpm c5ace3a3df1504b87043087113f5fe11d08e1596e1ee7695eecf75b4920047e1
s390x 389-ds-base-libs-3.2.0-8.el10_2.s390x.rpm ebe21c4a2247072af66b05010a858b4792b7520853b41cd34ffb1b1ae90869f2
x86_64 389-ds-base-devel-3.2.0-8.el10_2.x86_64.rpm 229f4833e4cdf47f28c0e7be50df3b2a6608cce8fcde00249b1ea9d66e5b7133
x86_64 389-ds-base-bdb-3.2.0-8.el10_2.x86_64.rpm 48719071d52bb4aa6e09b051fa708d728376f51b8ff96062d9946859d2c4892d
x86_64 389-ds-base-snmp-3.2.0-8.el10_2.x86_64.rpm 604197033ad506e8f6d5587b7d4706a5f8e94b3f6f8bae9c362da6660bf079cf
x86_64 389-ds-base-3.2.0-8.el10_2.x86_64.rpm b282427aacdbe05067ba54d2189679ee09b2cf61a3263cb489e15da5738eadbc
x86_64 389-ds-base-libs-3.2.0-8.el10_2.x86_64.rpm cf442e2736acde0e918d129735fa02db37625a625727a5c3c1089ba875ceba4d
x86_64_v2 389-ds-base-3.2.0-8.el10_2.x86_64_v2.rpm 1b15156afad499f8a025bfca3b8fd627eb8d112ddeea16d6511ad676c38721ca
x86_64_v2 389-ds-base-bdb-3.2.0-8.el10_2.x86_64_v2.rpm 629f6b267466b9b7bb141f9577b76ddb520eb155a0aafb09c47777015e79b6be
x86_64_v2 389-ds-base-libs-3.2.0-8.el10_2.x86_64_v2.rpm 6ef82e6b350dd79c55c22d8110b14f9268de5401871be7e75e7e7744baf82213
x86_64_v2 389-ds-base-snmp-3.2.0-8.el10_2.x86_64_v2.rpm 81b1c626025d5166ff53c592ca1aafd86ae19338666826709875e9142f41827b
x86_64_v2 389-ds-base-devel-3.2.0-8.el10_2.x86_64_v2.rpm e7d287d40f683f04f6a897ee21e3886fc521182ecfc16ffff9cf4408accb1cae
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.