TI-2026-15471 CVE-2026-18922 · GHSA-pr87-24g5-hphv
Improper authentication in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 44
A flaw was found in 389 Directory Server.
RHSA-2026:64792
redhat-ds:11 security, bug fix, and enhancement update
Released 2026-09-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Directory Server 11.7 E4S for RHEL 8 389-ds-base-1.4.3.34-18.module+el8dsrv+24812+0acb1821.src::redhat-ds:11, 389-ds-base-1.4.3.34-18.module+el8dsrv+24812+0acb1821.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.34-18.module+el8dsrv+24812+0acb1821.x86_64::redhat-ds:11 +5
Fixes 5 records
TI-2026-53505 CVE-2026-76560 · GHSA-g4xg-g9jg-549h
389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-15160 CVE-2026-18453 · GHSA-42wr-8m7m-5j62
NULL pointer dereference in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority MEDIUM 40
A flaw was found in 389 Directory Server.
TI-2026-16091 CVE-2026-19843 · GHSA-p34m-7cj2-q64p
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
Priority LOW 39
A flaw was found in 389-ds-base.
TI-2026-15090 CVE-2026-18355 · GHSA-r5vv-79fp-2427
Integer underflow in Red Hat Directory Server 11.5 E4S for RHEL 8
Priority LOW 36
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).