Red Hat Security Advisory

RHSA-2026:55757

389-ds:1.4 security update

Released 2026-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) 389-ds-base-1.4.3.34-6.module+el8.4.0+24619+217e1084.src::389-ds:1.4, 389-ds-base-1.4.3.34-6.module+el8.4.0+24619+217e1084.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-6.module+el8.4.0+24619+217e1084.x86_64::389-ds:1.4 +4
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) 389-ds-base-1.4.3.34-6.module+el8.4.0+24619+217e1084.src::389-ds:1.4, 389-ds-base-1.4.3.34-6.module+el8.4.0+24619+217e1084.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-6.module+el8.4.0+24619+217e1084.x86_64::389-ds:1.4 +4

Fixes 3 records

TI-2026-13229 CVE-2026-15722 · GHSA-5gg4-m865-6qwr

Stack-based buffer overflow in Red Hat Directory Server 11.5 E4S for RHEL 8

MEDIUM 40

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0083 Published 2026-07-31 Partial fix · 8060020260908152739.0ca98e7e, 8080020260806114250.f969626e +14 CWE-121

TI-2026-10157 CVE-2026-11770 · GHSA-r7mx-568f-jgg3

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

LOW 39

A flaw was found in 389 Directory Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00527 Published 2026-07-31 Partial fix · 8060020260908152739.0ca98e7e, 8080020260806114250.f969626e +14 CWE-90

TI-2026-10175 CVE-2026-11788 · GHSA-x2wj-4r98-4867

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

LOW 34

A flaw was found in 389 Directory Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2026-06-09 Partial fix · 8060020260908152739.0ca98e7e, 8080020260806114250.f969626e +14 CWE-476