Red Hat Product Errata RHSA-2026:55758 - Security Advisory
Issued:
2026-08-17
Updated:
2026-08-17

RHSA-2026:55758 - Security Advisory

Synopsis

Important: 389-ds-base security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770)
  • 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788)
  • 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2484802 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
  • BZ - 2485423 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser
  • BZ - 2499961 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
389-ds-base-1.3.11.1-14.el7_9.src.rpm SHA-256: 800c252a79ebc4735ca67d9aa9b42a4e69e672002315019c68bfd939b93d8b98
x86_64
389-ds-base-1.3.11.1-14.el7_9.x86_64.rpm SHA-256: 441e7eed453b1dbfb124efa0a2fb4a0eda753d6c21e1f72f8e9c517ebcb57606
389-ds-base-debuginfo-1.3.11.1-14.el7_9.x86_64.rpm SHA-256: 8df635085f23452542ffee5fb844870a240079daa77eab04de417ad524c6f31b
389-ds-base-debuginfo-1.3.11.1-14.el7_9.x86_64.rpm SHA-256: 8df635085f23452542ffee5fb844870a240079daa77eab04de417ad524c6f31b
389-ds-base-devel-1.3.11.1-14.el7_9.x86_64.rpm SHA-256: 86afcf71315b8721af9de5cdf482d5d6ed7a54f9e5461a19ffb5d6ec287d6e6e
389-ds-base-libs-1.3.11.1-14.el7_9.x86_64.rpm SHA-256: c5f5525017c04f0c0e57243dd6ec23cc9115f06fa01a0a69a6850876807c7839
389-ds-base-snmp-1.3.11.1-14.el7_9.x86_64.rpm SHA-256: bbe70a1d458d82c2402a4b6a6f9a5e37d3b88975f5cf7f81caa501afb8811b87

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
389-ds-base-1.3.11.1-14.el7_9.src.rpm SHA-256: 800c252a79ebc4735ca67d9aa9b42a4e69e672002315019c68bfd939b93d8b98
s390x
389-ds-base-1.3.11.1-14.el7_9.s390x.rpm SHA-256: cef2c7408d1abcbbe22e506100e8b9357f894d988d3a44d137a62a845d8571e7
389-ds-base-debuginfo-1.3.11.1-14.el7_9.s390x.rpm SHA-256: a8dea3321cf41e5c0cd74913cca080cd5f675c6342577be96ca5741643110e50
389-ds-base-devel-1.3.11.1-14.el7_9.s390x.rpm SHA-256: 60e6aa2e15992e7f320ddec90a30fdd157f5eecbb89009c8274f6a4549cae153
389-ds-base-libs-1.3.11.1-14.el7_9.s390x.rpm SHA-256: b43ddfe5a4663ce6fc7bb3fbc9354a74a31fb282b9ab806f96ab1e479b73bc99
389-ds-base-snmp-1.3.11.1-14.el7_9.s390x.rpm SHA-256: f6f17d4c673525a36fc36f726b408205c46cb363880936fb3d8f930459238ea1

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
389-ds-base-1.3.11.1-14.el7_9.src.rpm SHA-256: 800c252a79ebc4735ca67d9aa9b42a4e69e672002315019c68bfd939b93d8b98
ppc64
389-ds-base-1.3.11.1-14.el7_9.ppc64.rpm SHA-256: a011a98876ba4cca156fde99bcd68faf00e4d02d851036ff0e6d84dd81edbd6d
389-ds-base-debuginfo-1.3.11.1-14.el7_9.ppc64.rpm SHA-256: df23d090c1300c08508ba7a55fb08c412be5f1499b181f6b86d0a961ed2cf27e
389-ds-base-devel-1.3.11.1-14.el7_9.ppc64.rpm SHA-256: bc00d14e9867a6754ff98daac641141efb1f445ff31eb7309ac7db56040df1ae
389-ds-base-libs-1.3.11.1-14.el7_9.ppc64.rpm SHA-256: d396439e08d925ada72a8f856062bddf4408c380e0bb1bd425ee9612aebae4cc
389-ds-base-snmp-1.3.11.1-14.el7_9.ppc64.rpm SHA-256: 86cb8dfbf00284e2b094dcc69d6673077e6f44886bd74d04cc96ad49c1e9f888

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
389-ds-base-1.3.11.1-14.el7_9.src.rpm SHA-256: 800c252a79ebc4735ca67d9aa9b42a4e69e672002315019c68bfd939b93d8b98
ppc64le
389-ds-base-1.3.11.1-14.el7_9.ppc64le.rpm SHA-256: 8abc5b31e146df17d85d6893f9adf2d0e49f40d581ea980054f7db0c7f924250
389-ds-base-debuginfo-1.3.11.1-14.el7_9.ppc64le.rpm SHA-256: d22dc9bf775e6f2735ae09e597a89c878c73c57e5662d4ce8def50b8e6027a88
389-ds-base-debuginfo-1.3.11.1-14.el7_9.ppc64le.rpm SHA-256: d22dc9bf775e6f2735ae09e597a89c878c73c57e5662d4ce8def50b8e6027a88
389-ds-base-devel-1.3.11.1-14.el7_9.ppc64le.rpm SHA-256: 2dc7454d8068ad431b685ddb2e8f58fe0ec43b6c66fbc92edb343a18345c4bbc
389-ds-base-libs-1.3.11.1-14.el7_9.ppc64le.rpm SHA-256: dafa47317ab335965042fe72a0e20961c71f93c91a33784fd14277346c69bee6
389-ds-base-snmp-1.3.11.1-14.el7_9.ppc64le.rpm SHA-256: 5b87df8007103dd65b891103691addff197e48d8c01d670466db1373051b1da1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.