RHSA-2026:55421: Important: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.Security Fix(es): 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in getruvelementfromberval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/389-ds-baseto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/389-ds-base-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/389-ds-base-debugsourceto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/389-ds-base-libsto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/389-ds-base-libs-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/389-ds-base-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/python3-lib389to a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2 - Upgrade
Upgrade
redhat/389-ds-baseto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2.aa - Upgrade
Upgrade
redhat/389-ds-base-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2.aa - Upgrade
Upgrade
redhat/389-ds-base-debugsourceto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2.aa - Upgrade
Upgrade
redhat/389-ds-base-libsto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2.aa - Upgrade
Upgrade
redhat/389-ds-base-libs-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2.aa - Upgrade
Upgrade
redhat/389-ds-base-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 2.2.4-20.el9_2.aa - Upgrade
Upgrade
389-ds-baseto a version that resolves this vulnerability.Patch CVE-2026-11788 - Upgrade
Upgrade
389-ds-baseto a version that resolves this vulnerability.Patch CVE-2026-15722 - Upgrade
Upgrade
389-ds-baseto a version that resolves this vulnerability.Patch CVE-2026-11770
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:55421?
The severity of RHSA-2026:55421 is high with a score of 7.
What vulnerabilities are addressed in RHSA-2026:55421?
RHSA-2026:55421 addresses a pre-auth LDAP filter injection vulnerability in 389 Directory Server.
How do I fix RHSA-2026:55421?
To fix RHSA-2026:55421, update the 389-ds-base packages to the latest version as recommended by Red Hat.
What impact does RHSA-2026:55421 have on my system?
If exploited, RHSA-2026:55421 could allow an attacker to inject malicious LDAP filters, compromising the security of your 389 Directory Server.
Is RHSA-2026:55421 applicable to all Red Hat systems?
RHSA-2026:55421 specifically applies to systems running the 389 Directory Server on Red Hat Enterprise Linux.