[ALSA-2026:64791] Critical: 389-ds:1.4 security, bug fix, and enhancement update
Type:
security
Severity:
critical
Release date:
2026-09-29
Description:
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() (CVE-2026-18355) * 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (CVE-2026-18453) * 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property (CVE-2026-18922) * 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN (CVE-2026-76560) Bug Fix(es) and Enhancement(s): * lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [almalinux-8.10.z] (JIRA:AlmaLinux-244463) * fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [almalinux-8.10.z] (JIRA:AlmaLinux-248762) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 389-ds-base-legacy-tools-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.aarch64.rpm 0360df67ed056350acfa9307f24b0c785b93165330ce57bd1dc0d804313935fb
aarch64 389-ds-base-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.aarch64.rpm 704b6732b45e432ce65046f92dd46a7070229a87370eb421533b46c20da20c4c
aarch64 389-ds-base-devel-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.aarch64.rpm 9415c8a262787054906fed22825a5f08c7943c777a4e534271bf67e32fdae8f0
aarch64 389-ds-base-snmp-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.aarch64.rpm d61c17da08845d9fd713138d30687c4da4d95517e9bf79612541007e2b7a292d
aarch64 389-ds-base-libs-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.aarch64.rpm d7985a07c184c787d782a4ba103e90a57d25581069fa5a40e2dfe748c64334c2
noarch python3-lib389-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.noarch.rpm ba482a11bb4f84e6b4bc8e2be0dce33c591c2ab617547f818f56e7a1b6ea35ae
ppc64le 389-ds-base-libs-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.ppc64le.rpm 2e53ad2631435acfb6a5132e8d4b78597a41dd03b67cd012683c7f99e098781b
ppc64le 389-ds-base-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.ppc64le.rpm 5b0673a36cc510d4f517c9cd18ea29a7b02b8c2705d0dc63fb7aae24edd2fa74
ppc64le 389-ds-base-legacy-tools-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.ppc64le.rpm 66121aa5b31f7bf22a8fe22fc9dea730827d051cf5aad3dbef4b417ae0f20f0a
ppc64le 389-ds-base-devel-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.ppc64le.rpm 6d2a86390aa645b03f4acab1fa4abd23d3dc7e9f05cdd3f9475663b9ff956440
ppc64le 389-ds-base-snmp-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.ppc64le.rpm 95e6a6eddb19740b1950f808594cd18da825e07e73ded7ca6e0630fe69916cae
s390x 389-ds-base-devel-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.s390x.rpm 2b495737e50c1ad20dda3ad7d611e6b93bac97b0cbea4b53cae539b995aef469
s390x 389-ds-base-snmp-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.s390x.rpm 309fa82705396f6c577ecbbb10b89f6605eda9ea4c77b850e65cb03167ec1a79
s390x 389-ds-base-legacy-tools-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.s390x.rpm e55460274df32dbb6c32f812233f43e8c397cb2f1bc11dc312cec4811579890b
s390x 389-ds-base-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.s390x.rpm e9ea799a3327722b04bed196b75721b1ce6d90935384286f86e74c83d6fb4d9b
s390x 389-ds-base-libs-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.s390x.rpm f228babb1e8372b7599c3dd4844428bd973eb4eabdff53e48ccf705852b6ed78
x86_64 389-ds-base-snmp-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.x86_64.rpm 497c9573023dcf693dffe850075c46d78335a01a7208eef118c21332f167c9f7
x86_64 389-ds-base-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.x86_64.rpm ba6972605141570c229dc73820757c16a7d32557cc4551afbe180def5c7197b4
x86_64 389-ds-base-legacy-tools-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.x86_64.rpm c9b142d19dcae3f89ee0449f053752b63a3dca7ba355223d34af94551cae958a
x86_64 389-ds-base-libs-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.x86_64.rpm e821c477b0d1abeed5e07ed145306f22a953584c3c35931818f1decdacbb008b
x86_64 389-ds-base-devel-1.4.3.39-28.module_el8.10.0+4274+00f9a3f1.x86_64.rpm fc7fd5c14fc9933d6600c23bb5626dc6c0e8af52b5daa1bb8b00892eb882beac
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.