RHSA-2026:55423: Important: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.Security Fix(es): 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in getruvelementfromberval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/389-ds-baseto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-debugsourceto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-libsto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-libs-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-snmpto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/python3-lib389to a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-baseto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-debugsourceto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-libsto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-libs-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-snmpto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Upgrade
Upgrade
redhat/389-ds-base-develto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8 - Upgrade
Upgrade
redhat/389-ds-base-develto a version that resolves this vulnerability.Fixed in 2.8.0-9.el9_8.aa - Compensating control
Apply the security update for 389-ds-base (389 Directory Server) as described in the Red Hat article so that the fixes for CVE-2026-11788, CVE-2026-15722, and CVE-2026-11770 are included (see the referenced advisory: access.redhat.com/articles/11258).
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:55423?
The severity of RHSA-2026:55423 is rated at 80.
How do I fix RHSA-2026:55423?
You can fix RHSA-2026:55423 by applying the latest security update for 389-ds-base.
What systems are affected by RHSA-2026:55423?
The affected systems include various packages within the redhat/389-ds-base suite.
What kind of vulnerability is addressed in RHSA-2026:55423?
RHSA-2026:55423 addresses a pre-auth LDAP filter injection vulnerability.
When was RHSA-2026:55423 published?
RHSA-2026:55423 was published on August 17, 2026.