Red Hat Product Errata RHSA-2026:55421 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55421 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2484802 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check BZ - 2485423 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser BZ - 2499961 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing CVEs CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 x86_64 389-ds-base-2.2.4-20.el9_2.x86_64.rpm SHA-256: 935e8fdf987c36dae888d25654902e215858552c4cf33d3178faa8ad4abae898 389-ds-base-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: 46bec80823857e1d322923e971eab1da8eeaaec4cccb153b52799d6349c829d8 389-ds-base-debugsource-2.2.4-20.el9_2.x86_64.rpm SHA-256: 64301768d7a4c2d63b0343cdced5732c527d1ca72a9fdf3bbfa18b9b2c08193a 389-ds-base-libs-2.2.4-20.el9_2.x86_64.rpm SHA-256: 74fac63e392e508ae40387b58d3886ed4af979d4c69f1ebced557d1dcd0d75b8 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: 1b07d680ba1190ec5ba6f1c80ffb02d74bbcac68446544a223e478a20732dccd 389-ds-base-snmp-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: e6b13277a9b646c2c5b0b61a190390a01e73a998269e24b9f3e6d96fecad20c2 python3-lib389-2.2.4-20.el9_2.noarch.rpm SHA-256: 12c26a2d20536772b98fadf9397feafcf90dd58baaf79e46e1e2be941ca54f3b Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 ppc64le 389-ds-base-2.2.4-20.el9_2.ppc64le.rpm SHA-256: 1454f80e72aef613eb97a38b3f2424879011b86d5e992c5b780b28e8e5de3357 389-ds-base-debuginfo-2.2.4-20.el9_2.ppc64le.rpm SHA-256: d6ea1052aa2b099f3128ea4c14def7ec814c2d56ebb2a928204a2c3f0d7dcde9 389-ds-base-debugsource-2.2.4-20.el9_2.ppc64le.rpm SHA-256: 2ade58e7804cb569858490c5ec5820b4d2d372f3d4505e6be44c7906fb6227ff 389-ds-base-libs-2.2.4-20.el9_2.ppc64le.rpm SHA-256: f71aa67e6be6c2eee1d4fcb13c2c044cb4adb0f81d75bfb55592a1d7e0963063 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.ppc64le.rpm SHA-256: 7cd081426d16685a30c0f90179c9f54783120e15af1460f3e2a97eac910e48ab 389-ds-base-snmp-debuginfo-2.2.4-20.el9_2.ppc64le.rpm SHA-256: 07c1d9add7d77e7d99b5688fa09b8bc00b6b235b81c59a2ad3ab19df96612197 python3-lib389-2.2.4-20.el9_2.noarch.rpm SHA-256: 12c26a2d20536772b98fadf9397feafcf90dd58baaf79e46e1e2be941ca54f3b Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 x86_64 389-ds-base-2.2.4-20.el9_2.x86_64.rpm SHA-256: 935e8fdf987c36dae888d25654902e215858552c4cf33d3178faa8ad4abae898 389-ds-base-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: 46bec80823857e1d322923e971eab1da8eeaaec4cccb153b52799d6349c829d8 389-ds-base-debugsource-2.2.4-20.el9_2.x86_64.rpm SHA-256: 64301768d7a4c2d63b0343cdced5732c527d1ca72a9fdf3bbfa18b9b2c08193a 389-ds-base-libs-2.2.4-20.el9_2.x86_64.rpm SHA-256: 74fac63e392e508ae40387b58d3886ed4af979d4c69f1ebced557d1dcd0d75b8 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: 1b07d680ba1190ec5ba6f1c80ffb02d74bbcac68446544a223e478a20732dccd 389-ds-base-snmp-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: e6b13277a9b646c2c5b0b61a190390a01e73a998269e24b9f3e6d96fecad20c2 python3-lib389-2.2.4-20.el9_2.noarch.rpm SHA-256: 12c26a2d20536772b98fadf9397feafcf90dd58baaf79e46e1e2be941ca54f3b Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 aarch64 389-ds-base-2.2.4-20.el9_2.aarch64.rpm SHA-256: 00734e0187a6a10054a7ead2abdfb9dc21df2a9f0955cbb68a8a1ed4238f4782 389-ds-base-debuginfo-2.2.4-20.el9_2.aarch64.rpm SHA-256: b6b7c7e50fb0ceda6bba33aacdd0ce1ca692cd7465f3e5d80b30cde16702869d 389-ds-base-debugsource-2.2.4-20.el9_2.aarch64.rpm SHA-256: 58187742aafd2e3a9294d47b05afe7a3749885008130bf4beafbf57315d4479c 389-ds-base-libs-2.2.4-20.el9_2.aarch64.rpm SHA-256: 28aa015fb40c2120feac617b9d67ce9be84828cac6b1335baa8f27f6fc1f8fa6 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.aarch64.rpm SHA-256: f285f5afbe5e6f7377ecb2c9298b88e7a131da58458be5236755192c6ae7e3c4 389-ds-base-snmp-debuginfo-2.2.4-20.el9_2.aarch64.rpm SHA-256: babe22c1ce1f68d082f0c8125781f7c1d577b3dcdee2761f61cd835598e143ff python3-lib389-2.2.4-20.el9_2.noarch.rpm SHA-256: 12c26a2d20536772b98fadf9397feafcf90dd58baaf79e46e1e2be941ca54f3b Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 s390x 389-ds-base-2.2.4-20.el9_2.s390x.rpm SHA-256: 4212ea35287958282ef03b471ee039e6e081ea0a8839b00a0c67f0e8c9b253d5 389-ds-base-debuginfo-2.2.4-20.el9_2.s390x.rpm SHA-256: 049f48c62d5bdc6884a78cd30ba08d4d3439b22c8f0ac3ab6555ff306e5a979d 389-ds-base-debugsource-2.2.4-20.el9_2.s390x.rpm SHA-256: a578f1335b7a79d13e903214f7d91c701d406fe9b229061c06b5ae89c6f62248 389-ds-base-libs-2.2.4-20.el9_2.s390x.rpm SHA-256: d40868e2c9f428640fec04a14e236e30bb1afbd4994c634b6a6888cff7bc4e62 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.s390x.rpm SHA-256: 755a23e2bfb1880bc107e3a2e7efaabe4bd4327677e827aa6fae1af63f3ed570 389-ds-base-snmp-debuginfo-2.2.4-20.el9_2.s390x.rpm SHA-256: cc5a420f85c538a66405be8ea56eb0d583bb6845d46e44d1aedf482fcfc9d0a9 python3-lib389-2.2.4-20.el9_2.noarch.rpm SHA-256: 12c26a2d20536772b98fadf9397feafcf90dd58baaf79e46e1e2be941ca54f3b Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 x86_64 389-ds-base-2.2.4-20.el9_2.x86_64.rpm SHA-256: 935e8fdf987c36dae888d25654902e215858552c4cf33d3178faa8ad4abae898 389-ds-base-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: 46bec80823857e1d322923e971eab1da8eeaaec4cccb153b52799d6349c829d8 389-ds-base-debugsource-2.2.4-20.el9_2.x86_64.rpm SHA-256: 64301768d7a4c2d63b0343cdced5732c527d1ca72a9fdf3bbfa18b9b2c08193a 389-ds-base-libs-2.2.4-20.el9_2.x86_64.rpm SHA-256: 74fac63e392e508ae40387b58d3886ed4af979d4c69f1ebced557d1dcd0d75b8 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: 1b07d680ba1190ec5ba6f1c80ffb02d74bbcac68446544a223e478a20732dccd 389-ds-base-snmp-debuginfo-2.2.4-20.el9_2.x86_64.rpm SHA-256: e6b13277a9b646c2c5b0b61a190390a01e73a998269e24b9f3e6d96fecad20c2 python3-lib389-2.2.4-20.el9_2.noarch.rpm SHA-256: 12c26a2d20536772b98fadf9397feafcf90dd58baaf79e46e1e2be941ca54f3b Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM 389-ds-base-2.2.4-20.el9_2.src.rpm SHA-256: b5f6b4ef56b4a32c7a9a2522a18c7a12697dd0eac641e630cb6fcbba583a5072 aarch64 389-ds-base-2.2.4-20.el9_2.aarch64.rpm SHA-256: 00734e0187a6a10054a7ead2abdfb9dc21df2a9f0955cbb68a8a1ed4238f4782 389-ds-base-debuginfo-2.2.4-20.el9_2.aarch64.rpm SHA-256: b6b7c7e50fb0ceda6bba33aacdd0ce1ca692cd7465f3e5d80b30cde16702869d 389-ds-base-debugsource-2.2.4-20.el9_2.aarch64.rpm SHA-256: 58187742aafd2e3a9294d47b05afe7a3749885008130bf4beafbf57315d4479c 389-ds-base-libs-2.2.4-20.el9_2.aarch64.rpm SHA-256: 28aa015fb40c2120feac617b9d67ce9be84828cac6b1335baa8f27f6fc1f8fa6 389-ds-base-libs-debuginfo-2.2.4-20.el9_2.aarch64.rpm SHA-256: f285f5afbe5e6f7377ecb2c9298b88e7a131da58458be5236755192c6ae7e3c4 389-ds-base-snmp-