Critical Security Flaws in 389-ds-base Package: Important Update Required
Summary
ALSA-2026:55424: Important: 389-ds-base security update. Affects 389-ds-base versions < 3.2.0-9.el10_2. Fixed in 3.2.0-9.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
389 Directory Server is an LDAP version 3 compliant server that provides a robust platform for managing directory services. It includes essential command-line utilities for server administration and is widely used in enterprise environments for user and resource management. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing this package.
Vulnerability Detail
The vulnerabilities in the 389-ds-base package include a pre-auth LDAP filter injection (CVE-2026-11770), a NULL pointer dereference in the deref control plugin BER parser (CVE-2026-11788), and a pre-authentication stack buffer overflow due to unbounded replica ID parsing (CVE-2026-15722). These issues can lead to unauthorized access, potential data breaches, and system crashes, making it critical for users to address them promptly.
How To Fix
Minimum fixed version
3.2.0-9.el10_2
This is the first release that contains the fix.
sudo dnf update 389-ds-baseTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for these vulnerabilities. The best course of action is to apply the available updates as soon as possible.
Conclusion
The vulnerabilities in the 389-ds-base package pose serious security risks that require immediate attention. Users are strongly advised to update to the patched version to safeguard their systems and data.
See every vulnerability recorded for 389-ds-base →
FAQ
389-ds-base is an LDAP compliant server used for managing directory services in enterprise environments.
The vulnerabilities can lead to unauthorized access, data breaches, and system crashes, posing significant risks to security.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
While there are no specific workarounds, it is crucial to prioritize updating the package to mitigate the risks associated with these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for 389-ds-base.
