TI-2026-15471 CVE-2026-18922 · GHSA-pr87-24g5-hphv
Improper authentication in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 44
A flaw was found in 389 Directory Server.
RHSA-2026:64790
389-ds:1.4 security, bug fix, and enhancement update
Released 2026-09-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) 389-ds-base-1.4.3.34-12.module+el8.6.0+24796+4783e9a9.src::389-ds:1.4, 389-ds-base-1.4.3.34-12.module+el8.6.0+24796+4783e9a9.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-12.module+el8.6.0+24796+4783e9a9.x86_64::389-ds:1.4 +4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) 389-ds-base-1.4.3.34-12.module+el8.6.0+24796+4783e9a9.src::389-ds:1.4, 389-ds-base-1.4.3.34-12.module+el8.6.0+24796+4783e9a9.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-12.module+el8.6.0+24796+4783e9a9.x86_64::389-ds:1.4 +4
Fixes 4 records
TI-2026-53505 CVE-2026-76560 · GHSA-g4xg-g9jg-549h
389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-15160 CVE-2026-18453 · GHSA-42wr-8m7m-5j62
NULL pointer dereference in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-15090 CVE-2026-18355 · GHSA-r5vv-79fp-2427
Integer underflow in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority LOW 36
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).