[ALSA-2026:55424] Important: 389-ds-base security update
Type:
security
Severity:
important
Release date:
2026-08-18
Description:
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 389-ds-base-bdb-3.2.0-9.el10_2.aarch64.rpm 01c142c097940ab8992fd12e7dafe6e996929ba729528e4a138d6c4e02f19430
aarch64 389-ds-base-devel-3.2.0-9.el10_2.aarch64.rpm 04c3dd5d4e3a78c2216bf63f0f3e6c28285d3a43fead3aa448fea7d6ec6981dd
aarch64 389-ds-base-snmp-3.2.0-9.el10_2.aarch64.rpm 1614ba50ec72223d40e0c8fb858260855b9f573452c652b520b47124ed24a2af
aarch64 389-ds-base-3.2.0-9.el10_2.aarch64.rpm 4a8dd3fde6ef2a85e4863e0f96a5373530b21de0529dd0e2fde27165d8612c06
aarch64 389-ds-base-libs-3.2.0-9.el10_2.aarch64.rpm 62a5e76842e95e60efc9902c80d50e66fb6458d5f05c6bcc86a56fc3fb03163a
noarch python3-lib389-3.2.0-9.el10_2.noarch.rpm 27cf3e06e99257f4c51c72088b1f9e5f48d590b294e516768385c0f484ac53a2
ppc64le 389-ds-base-3.2.0-9.el10_2.ppc64le.rpm 0f1afa51405a3d020b3f4e8ac7335fcaf51d971f32ce4974fa0bae2cc39355fc
ppc64le 389-ds-base-libs-3.2.0-9.el10_2.ppc64le.rpm 2775c87b284c7e099a1a7d7f92ce398b6fc4169bb7d4ffbab105d87c2120745f
ppc64le 389-ds-base-bdb-3.2.0-9.el10_2.ppc64le.rpm 6f263c061df7dc6d77df7d020202cd170468d555611f080b0a84a9ed13e1f074
ppc64le 389-ds-base-snmp-3.2.0-9.el10_2.ppc64le.rpm 811af1af75c9d1e98003c0a9cb6edbcf11a6f53ac44602e09263e65dbb223a49
ppc64le 389-ds-base-devel-3.2.0-9.el10_2.ppc64le.rpm ca4df9c1937fe82202cc30bc5470bc7a56d99f5e196e9b011d5fb8fed3de6f5f
s390x 389-ds-base-snmp-3.2.0-9.el10_2.s390x.rpm 30de43f989ec4d4058d9ce4bc7d1a54aef006057e0e2ce110fbe9fc060b0f63a
s390x 389-ds-base-bdb-3.2.0-9.el10_2.s390x.rpm 32bb382f6e21b0e594c3c812fa70ad83089ccdc6709e68e0b6f5d8077e8ab6ac
s390x 389-ds-base-devel-3.2.0-9.el10_2.s390x.rpm 9d932c2199405fc3452a66ceed4fc329bd497d0bd7b1b15cf26160e4b187029e
s390x 389-ds-base-3.2.0-9.el10_2.s390x.rpm b5ea36197e439782435b4bf37d98fcf923fda1dbd7edcddbf9d7dc09533867b1
s390x 389-ds-base-libs-3.2.0-9.el10_2.s390x.rpm ceda9e1a6ef0ad27904aa034fd1267fbce641ef2b322290a8fadc8a028ae7615
x86_64 389-ds-base-3.2.0-9.el10_2.x86_64.rpm 48de894c10203885adff6503dbe0c741d9b1a9eff10daf247476e818c7c0cbd7
x86_64 389-ds-base-libs-3.2.0-9.el10_2.x86_64.rpm 8250ac771878c73810d293a35c0e21ec8e2813f2ea555a89247d9735dee3a1d5
x86_64 389-ds-base-devel-3.2.0-9.el10_2.x86_64.rpm 837388560cec0da39bc957675ca2e85af50bb806c89c3f688c33ba39fafaf596
x86_64 389-ds-base-snmp-3.2.0-9.el10_2.x86_64.rpm 878f70eed89a498ac0d11c236da751455cfd2f7ef15f7ba89647059eda1a4e94
x86_64 389-ds-base-bdb-3.2.0-9.el10_2.x86_64.rpm 87f338ec75077cdedde4edb9de0183abbd88ecfd20cc4df05845248010f10005
x86_64_v2 389-ds-base-snmp-3.2.0-9.el10_2.x86_64_v2.rpm 115cd522eb964d0f493910cc0dd5587dba6e471945baf3c8c1dd9b0542ec2346
x86_64_v2 389-ds-base-3.2.0-9.el10_2.x86_64_v2.rpm b889759e1f8d5ef1528619138f5dae6348802a208ceb8f8eca0704a60b9e665e
x86_64_v2 389-ds-base-libs-3.2.0-9.el10_2.x86_64_v2.rpm bf02666432177b282009d7e4b6648e2477416a048465552a82610f8a8350bd6b
x86_64_v2 389-ds-base-bdb-3.2.0-9.el10_2.x86_64_v2.rpm c82cfb57b5b804049f30d5bdaf01350dc00f00749b352b411a35c44414022804
x86_64_v2 389-ds-base-devel-3.2.0-9.el10_2.x86_64_v2.rpm d661d2dc53a83f923ca4d5dd744ef3503f7d2ad5dd48b51aa929cf802b1f1684
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.