[ALSA-2026:55423] Important: 389-ds-base security update
Type:
security
Severity:
important
Release date:
2026-08-18
Description:
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): * 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) * 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) * 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 389-ds-base-devel-2.8.0-9.el9_8.aarch64.rpm 0f85f95ffb008002d64deff9f3df76e435788b3d2a6dce9462e3ef0b88f1b7bc
aarch64 389-ds-base-snmp-2.8.0-9.el9_8.aarch64.rpm 11801cb217047eb450c305f40f871451085ac15b0ccd77048bd79a1e5c7741af
aarch64 389-ds-base-libs-2.8.0-9.el9_8.aarch64.rpm 26c753433c6fa286181bea2242642fc0e7d3feee5b8c8b40e7cf71630f3f38ca
aarch64 389-ds-base-2.8.0-9.el9_8.aarch64.rpm e251a683f7164c22f252bf587bef731d113c1fd3bda9d5305c9cb35f92aee690
noarch python3-lib389-2.8.0-9.el9_8.noarch.rpm 94aef5c4492dd0017c07a974db60910e4e300449f1b5765b51bbc57b93310f83
ppc64le 389-ds-base-libs-2.8.0-9.el9_8.ppc64le.rpm 17e5e98e1becec40e93891d901bfd9f86bffd71d165015f11c6a39ec35079df8
ppc64le 389-ds-base-devel-2.8.0-9.el9_8.ppc64le.rpm af268a3b344feaae01a1aba55c27f42f172b8b70daf4865062b8586f9bb5a64a
ppc64le 389-ds-base-snmp-2.8.0-9.el9_8.ppc64le.rpm c7678ade70a29e2902dde8166462b92867bde39c0ea799c981687a5ee9ec1442
ppc64le 389-ds-base-2.8.0-9.el9_8.ppc64le.rpm cf2a38be2c566e6cd28801e8726c4e23b1c4c7a899ab3fdfe38000fa8ad755bf
s390x 389-ds-base-devel-2.8.0-9.el9_8.s390x.rpm 2254887eb83738ad2895f0ed0aa9f41d445c73d326b5e082a03a29f824dc0893
s390x 389-ds-base-snmp-2.8.0-9.el9_8.s390x.rpm 42cdd8395df5f71523f606b3d17a16fb6440b2f5d400ab2b5e591bf875b9cf2b
s390x 389-ds-base-libs-2.8.0-9.el9_8.s390x.rpm 5c06918dd715dc9588d99abbddeac9219c1474721d59cd28a7f345aa11fc8a82
s390x 389-ds-base-2.8.0-9.el9_8.s390x.rpm 9d35078b305e55974601c3e423d63886cef47daa1762bb34bc5190566e9021ea
x86_64 389-ds-base-devel-2.8.0-9.el9_8.x86_64.rpm 26a9a8bf8794586485c24d6d1d7b692c61d2bf01b8182e44b14b72635802e478
x86_64 389-ds-base-2.8.0-9.el9_8.x86_64.rpm 7c6dcd50b656fd16b2c7eeffb214a13ccc10b9596c10dd7640e1951fe3bec16d
x86_64 389-ds-base-libs-2.8.0-9.el9_8.x86_64.rpm b530f0044e3af586fbf316ffa30ca7ea86c9a10ea5b4735933cd7066d4b6e9f5
x86_64 389-ds-base-snmp-2.8.0-9.el9_8.x86_64.rpm dc8d5108313496336ca955b4b080c801d8f7279b4aa1132a6d8afd20a353bb38
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.