TI-2026-15471 CVE-2026-18922 · GHSA-pr87-24g5-hphv
Improper authentication in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 44
A flaw was found in 389 Directory Server.
RHSA-2026:64780
redhat-ds:12 security, bug fix, and enhancement update
Released 2026-09-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Directory Server 12.4 E4S for RHEL 9 389-ds-base-2.4.5-26.module+el9dsrv+24813+95aeb06d.src::redhat-ds:12, 389-ds-base-2.4.5-26.module+el9dsrv+24813+95aeb06d.x86_64::redhat-ds:12, 389-ds-base-devel-2.4.5-26.module+el9dsrv+24813+95aeb06d.x86_64::redhat-ds:12 +4
Fixes 5 records
TI-2026-53505 CVE-2026-76560 · GHSA-g4xg-g9jg-549h
389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-15160 CVE-2026-18453 · GHSA-42wr-8m7m-5j62
NULL pointer dereference in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-16091 CVE-2026-19843 · GHSA-p34m-7cj2-q64p
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
Priority LOW 39
A flaw was found in 389-ds-base.
TI-2026-15090 CVE-2026-18355 · GHSA-r5vv-79fp-2427
Integer underflow in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority LOW 36
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).