TI-2026-15471 CVE-2026-18922 · GHSA-pr87-24g5-hphv
Improper authentication in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 44
A flaw was found in 389 Directory Server.
RHSA-2026:64785
389-ds-base security, bug fix, and enhancement update
Released 2026-09-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) 389-ds-base-3.2.0-10.el10_2, 389-ds-base-libs-3.2.0-10.el10_2, 389-ds-base-snmp-3.2.0-10.el10_2 +1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) 389-ds-base-bdb-3.2.0-10.el10_2, 389-ds-base-devel-3.2.0-10.el10_2
Fixes 5 records
TI-2026-53505 CVE-2026-76560 · GHSA-g4xg-g9jg-549h
389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-15160 CVE-2026-18453 · GHSA-42wr-8m7m-5j62
NULL pointer dereference in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-15090 CVE-2026-18355 · GHSA-r5vv-79fp-2427
Integer underflow in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority LOW 36
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).
TI-2026-54702 CVE-2026-78701 · GHSA-xmh3-2gr9-2rwp
389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos
Priority LOW 30
A flaw was found in 389-ds-base.