[ALSA-2026:55530] Important: 389-ds:1.4 security update
Type:
security
Severity:
important
Release date:
2026-08-18
Description:
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 389-ds-base-libs-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.aarch64.rpm 50dca2333c204022c1e1018f6903a6af409e567ff625e41e73cc737a7467e53b
aarch64 389-ds-base-legacy-tools-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.aarch64.rpm 565496a396d20bfb155183f79462e4531420648c421c0154ed9ba1ccbf97530b
aarch64 389-ds-base-devel-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.aarch64.rpm 6cbe8c4a8826575af40841e86ec1f005d568151b5363bc1944bdd350b4fc811c
aarch64 389-ds-base-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.aarch64.rpm 761540fc7d2aa5ed6a662a3443f5af58d15f536c26f41156c0b4dff7820cfd90
aarch64 389-ds-base-snmp-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.aarch64.rpm fe0b502b74105152391d708fbebd0b20c14ddfb16f3e262e757d57ad5ade5613
noarch python3-lib389-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.noarch.rpm b40ebb1f93f714f1e3febe31037d34a22cc9a49578a3069b1d20fa103ab7500d
ppc64le 389-ds-base-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.ppc64le.rpm 24ce125d55a312b0617ae7d3f71329ebb472d7f3a74098b8d651ba3a9fe36129
ppc64le 389-ds-base-legacy-tools-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.ppc64le.rpm 8995c6169685982146085ae720b8b2a035eae3425543909341c0a4ab9735a94b
ppc64le 389-ds-base-libs-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.ppc64le.rpm a15c0b5c673c2999dacd9905107a7553637fe329bbbe8fbaa04dab6204586409
ppc64le 389-ds-base-snmp-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.ppc64le.rpm c4a8d604c2c066e7f956bf60a9d4e1903735f954fd61b62115696c1ff5f2a2ac
ppc64le 389-ds-base-devel-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.ppc64le.rpm ec887b90bc36d3075c5a1fbab9589252c7784bcffc04bf18ab26f41e3327d55f
s390x 389-ds-base-devel-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.s390x.rpm 039cfcb65ca0b278ab11ad496e4634c7d8fe8e6cade32a35b08e2b1be787b9a9
s390x 389-ds-base-snmp-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.s390x.rpm 1107d4ffee222e4e40f41f5655fb81b0861c003cc423386b47e1bccfb302d45e
s390x 389-ds-base-libs-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.s390x.rpm 30759f84a6ebdbaaaf94ba755bac7f57056031c57c238feb8a64226b298ee5e6
s390x 389-ds-base-legacy-tools-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.s390x.rpm b660b0c0afdebf77ecd54607557caee3913d3c476f2166e5ffcf83c2bace936d
s390x 389-ds-base-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.s390x.rpm fa2c8690922c1a46e7bb4b704efb7ee9419665b0f4684ffe9e13eb2c6c975653
x86_64 389-ds-base-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.x86_64.rpm a8751ad59d35b7ead8dce2f8fa8faecc16d1a05dede4eebfc287ca6011520d09
x86_64 389-ds-base-legacy-tools-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.x86_64.rpm ad985ca301c088390d389a5c78729db624162cc26fe1666b249b7f1d3f5853fb
x86_64 389-ds-base-libs-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.x86_64.rpm af0ecf12de7888a231c7da6776416845dfcccc16932a719ab15649df6a43c726
x86_64 389-ds-base-snmp-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.x86_64.rpm b74c01d6c5dcc52aa42131a1652c7d6c1f688cddfed4850fc5c65dcc82b50e17
x86_64 389-ds-base-devel-1.4.3.39-26.module_el8.10.0+4254+e9c4b400.x86_64.rpm f7d638d0fadd5f5beeb43f5674455cdf5f3e78ddaa5215190ccb9df49645ce48
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.