[ALSA-2026:64785] Critical: 389-ds-base security, bug fix, and enhancement update
Type:
security
Severity:
critical
Release date:
2026-09-14
Description:
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVE-2026-18355) * 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (CVE-2026-18453) * 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property (CVE-2026-18922) * 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN (CVE-2026-76560) * 389-ds-base: 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS (CVE-2026-78701) Bug Fix(es) and Enhancement(s): * lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [almalinux-10.2.z] (JIRA:AlmaLinux-244470) * fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [almalinux-10.2.z] (JIRA:AlmaLinux-248770) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 389-ds-base-libs-3.2.0-10.el10_2.aarch64.rpm 13ac9df2009fe04c2d3b2cee0fe1707300a5a6d05ebb8cd827cd9aaa7246e26f
aarch64 389-ds-base-3.2.0-10.el10_2.aarch64.rpm 29ddde3ffba68417234cc4bf71503d73cad02a0dc426f9f6413dac48e1f9e860
aarch64 389-ds-base-snmp-3.2.0-10.el10_2.aarch64.rpm 4ea19b89cd1ec1a8b2141cd1f9a6553393c59c2adfb1bfa11a451e6481553ee8
aarch64 389-ds-base-bdb-3.2.0-10.el10_2.aarch64.rpm 5ff976467786ed27aba9cad917242800a357c9f1d7b4b1b087288292c43e7643
aarch64 389-ds-base-devel-3.2.0-10.el10_2.aarch64.rpm bf427f234ebeb9b67c39acb8ec98da0e8bbd3ebc345204b8d0aa384c9b689642
noarch python3-lib389-3.2.0-10.el10_2.noarch.rpm 307a5e67b7efa8839b6753d9a1070e7d39a56a06e6b646f7e9121a21f6a89d52
ppc64le 389-ds-base-snmp-3.2.0-10.el10_2.ppc64le.rpm 065c98653e2826bd439f8dc7e8ad8d70fe62a97440adf96e09c676c02697368a
ppc64le 389-ds-base-bdb-3.2.0-10.el10_2.ppc64le.rpm 0d181e30cbb6b24ca6369a6354e99c02455d0d2baf81a0932d6373da35bae4af
ppc64le 389-ds-base-3.2.0-10.el10_2.ppc64le.rpm 3f1b7a63b2cd7ddd7797c57202125174073417c2fc57ae71400b7e011ef83e17
ppc64le 389-ds-base-libs-3.2.0-10.el10_2.ppc64le.rpm 9b8d7725469801ef6940e9e1a4e0a0ad168fe05a1727202681ab9775acdb6abe
ppc64le 389-ds-base-devel-3.2.0-10.el10_2.ppc64le.rpm d9607d0c75af478c92cf4aecd63e5b696e904fd2752e4cbcf41e8c7bb565099c
s390x 389-ds-base-libs-3.2.0-10.el10_2.s390x.rpm 38812e358b752c3df3d5643d2d28fac915e5bec1fa4dfc0ccb8cc96245c3722e
s390x 389-ds-base-3.2.0-10.el10_2.s390x.rpm 623853bed782ba89a7992feedd9b611269ffd6bffbb80d0784188d3ebb37d480
s390x 389-ds-base-snmp-3.2.0-10.el10_2.s390x.rpm 976a2abcd46b24609c01127574a7bea6a351d3e3952261899ba17c4c12f249fd
s390x 389-ds-base-bdb-3.2.0-10.el10_2.s390x.rpm c98fe2b56713598aa8ad57a9aee2a2cf465064fef62f0c4f2bc5c667de43c45b
s390x 389-ds-base-devel-3.2.0-10.el10_2.s390x.rpm f982e330d9c8f8f907319b2d7a5d20fb80df2e950cf719877b622ade84631675
x86_64 389-ds-base-snmp-3.2.0-10.el10_2.x86_64.rpm 3ee2ce92c1076d455c20e5b403fba6a2c364e735e441b979dd3fc90aa52ed214
x86_64 389-ds-base-3.2.0-10.el10_2.x86_64.rpm 58c71005c982714fe0ea365350a60783636a9cec730d8439269dea27c03e5a0c
x86_64 389-ds-base-bdb-3.2.0-10.el10_2.x86_64.rpm 5f81afa80a63e834ed4ba52d4070db0ec6f4cfaf1d5c60a0c0daf77456959a3c
x86_64 389-ds-base-libs-3.2.0-10.el10_2.x86_64.rpm 6e2fa8309f92ffc7532bac952f621a4de3d546d4d962296e88513972dcbc6321
x86_64 389-ds-base-devel-3.2.0-10.el10_2.x86_64.rpm c1cac3704847deb715bb278051058a894be1d1a7c3e2df91ed4474c3f79ec32c
x86_64_v2 389-ds-base-libs-3.2.0-10.el10_2.x86_64_v2.rpm 0ef90550775b2e51eb648379904a267fc10aef98112d943fdcafb0f808f45265
x86_64_v2 389-ds-base-3.2.0-10.el10_2.x86_64_v2.rpm 4a92d9ccd74c06b4ae05142cce8025aaf47104e4dfd14268459d067b76af2e7d
x86_64_v2 389-ds-base-devel-3.2.0-10.el10_2.x86_64_v2.rpm 600c68d916b225e1d14dedd96343eabd72bdf80ba4d291c4ef6cb12af5d798e6
x86_64_v2 389-ds-base-snmp-3.2.0-10.el10_2.x86_64_v2.rpm 8f91aecd5b03e08fb1840bbd80ac9a1c4c1d1fe012dc804a1e5661030e32f96e
x86_64_v2 389-ds-base-bdb-3.2.0-10.el10_2.x86_64_v2.rpm b226d0c901967ce10db92e68f988c5c5d84827d1eb8b7d930b2a8e6b0c088e16
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.