Red Hat Security Advisory

RHSA-2026:65119

Red Hat Directory Server 13.2 container image update

Released 2026-09-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Directory Server 13.2 registry.redhat.io/dirsrv/dirsrv-container-rhel10

Fixes 4 records

TI-2026-53505 CVE-2026-76560 · GHSA-g4xg-g9jg-549h

389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn

MEDIUM 40

A flaw was found in 389 Directory Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00556 Published 2026-09-07 Partial fix · 8060020260908152739.0ca98e7e, 8080020260903102346.f969626e +15 CWE-863

TI-2026-15160 CVE-2026-18453 · GHSA-42wr-8m7m-5j62

NULL pointer dereference in Red Hat Directory Server 11.5 E4S for RHEL 8

MEDIUM 40

A flaw was found in 389 Directory Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00847 Published 2026-09-07 Partial fix · 8060020260908152739.0ca98e7e, 8080020260903102346.f969626e +15 CWE-476

TI-2026-15090 CVE-2026-18355 · GHSA-r5vv-79fp-2427

Integer underflow in Red Hat Directory Server 11.5 E4S for RHEL 8

LOW 36

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00837 Published 2026-09-07 Partial fix · 8060020260908152739.0ca98e7e, 8080020260903102346.f969626e +15 CWE-191

TI-2026-54702 CVE-2026-78701 · GHSA-xmh3-2gr9-2rwp

389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

LOW 30

A flaw was found in 389-ds-base.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00778 Published 2026-08-25 Partial fix · 3.2.0-10.el10_2, 2.8.0-10.el9_8 +1 CWE-787