This Red Hat security advisory addresses three vulnerabilities in the 389-ds-base LDAP server, including a high-severity pre-authentication LDAP filter injection (CVE-2026-11770, CVSS 7.5) and a high-severity pre-auth stack buffer overflow (CVE-2026-15722, CVSS 7.5), which could lead to remote code execution or denial of service. The affected versions include Red Hat Directory Server 11.0, 12.0, and 13.0, as well as Red Hat Enterprise Linux 7.0 and 8.0. Red Hat has released a security update rated as Important to remediate these issues.
Red Hat Product Errata RHSA-2026:55422 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55422 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770) 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788) 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2484802 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check BZ - 2485423 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser BZ - 2499961 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing CVEs CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 x86_64 389-ds-base-2.4.5-27.el9_4.x86_64.rpm SHA-256: 59bbbe181993e859ab88c59ad757f472d6dc6aee359f892925e2426458190712 389-ds-base-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 82711d4d6fbdbc16c7eb3f39bf49f994a4c7c02af525d9e257ae883f5bf8b729 389-ds-base-debugsource-2.4.5-27.el9_4.x86_64.rpm SHA-256: 3b41330939672a6d2fcc688ef69fd834886ddc2cd2ba4b9ac7913a1a4d59244d 389-ds-base-libs-2.4.5-27.el9_4.x86_64.rpm SHA-256: 162a366aac1ea9048e11af13a48681fda2bd10a29989ecabd8e4c312a75a8cff 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 6d9e38234c4d682ad26f10a011416325e9c81ab35307611992f493756da09e49 389-ds-base-snmp-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 972eb3569dea1040d73e166a7807921174966a670038aeb2cec07fd04c4bbd1a python3-lib389-2.4.5-27.el9_4.noarch.rpm SHA-256: a97da25ad526b0bf5a96597b264c46ad08c1f85b1e0584cee75d46b07a1f1e33 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 ppc64le 389-ds-base-2.4.5-27.el9_4.ppc64le.rpm SHA-256: 00af228f222fe68eeed2dd492eab5610f79d5401efe53c741e5a1321a61b3cc2 389-ds-base-debuginfo-2.4.5-27.el9_4.ppc64le.rpm SHA-256: 2e58d15785cf0cd9efe747a2ae17ddd50b0b2b53afd1eefceda86fd0ba5a5996 389-ds-base-debugsource-2.4.5-27.el9_4.ppc64le.rpm SHA-256: 2fc811c9770b685b0d8901355e5b3c74f0504a0012978d6d70dcc16f042d9809 389-ds-base-libs-2.4.5-27.el9_4.ppc64le.rpm SHA-256: c0f49d57980974cdb5a303d039de29128a90a83b7ea441843022c99323e8030f 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.ppc64le.rpm SHA-256: 895465fe66241bb4ceafd8d289897beeaab1175721c41460ce8ffe7cdb729383 389-ds-base-snmp-debuginfo-2.4.5-27.el9_4.ppc64le.rpm SHA-256: fca94d18f0e1348391324a3b90e10f3ba3e88d5e5e1ca8c35bea6cf1051c219d python3-lib389-2.4.5-27.el9_4.noarch.rpm SHA-256: a97da25ad526b0bf5a96597b264c46ad08c1f85b1e0584cee75d46b07a1f1e33 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 x86_64 389-ds-base-2.4.5-27.el9_4.x86_64.rpm SHA-256: 59bbbe181993e859ab88c59ad757f472d6dc6aee359f892925e2426458190712 389-ds-base-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 82711d4d6fbdbc16c7eb3f39bf49f994a4c7c02af525d9e257ae883f5bf8b729 389-ds-base-debugsource-2.4.5-27.el9_4.x86_64.rpm SHA-256: 3b41330939672a6d2fcc688ef69fd834886ddc2cd2ba4b9ac7913a1a4d59244d 389-ds-base-libs-2.4.5-27.el9_4.x86_64.rpm SHA-256: 162a366aac1ea9048e11af13a48681fda2bd10a29989ecabd8e4c312a75a8cff 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 6d9e38234c4d682ad26f10a011416325e9c81ab35307611992f493756da09e49 389-ds-base-snmp-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 972eb3569dea1040d73e166a7807921174966a670038aeb2cec07fd04c4bbd1a python3-lib389-2.4.5-27.el9_4.noarch.rpm SHA-256: a97da25ad526b0bf5a96597b264c46ad08c1f85b1e0584cee75d46b07a1f1e33 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 aarch64 389-ds-base-2.4.5-27.el9_4.aarch64.rpm SHA-256: 7b49a656a26e83c4cd98b57ad86c0ffd325bc5a86b27ae1023e9155246888047 389-ds-base-debuginfo-2.4.5-27.el9_4.aarch64.rpm SHA-256: 0a56032b31ece0b2aa0684b47738951e964dd282440ba8452a1acf24cf7750dc 389-ds-base-debugsource-2.4.5-27.el9_4.aarch64.rpm SHA-256: ea5c598009c2d1f772a7ae24a0e65dfbd431dd145ab71cd9ac976d1429c1fc0f 389-ds-base-libs-2.4.5-27.el9_4.aarch64.rpm SHA-256: 7870e2cb09e3ac6724cec1ec929d9100996f047998b3831f94e8b855da12d91e 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.aarch64.rpm SHA-256: d3aa768ced2889abbc534f0c3fc159e54a79a7d362067fce830856321cbd8d93 389-ds-base-snmp-debuginfo-2.4.5-27.el9_4.aarch64.rpm SHA-256: 82aec9c03124fa7e69fef5ab7cebc942b119753c9856c25135c9a6a58aa54fd7 python3-lib389-2.4.5-27.el9_4.noarch.rpm SHA-256: a97da25ad526b0bf5a96597b264c46ad08c1f85b1e0584cee75d46b07a1f1e33 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 s390x 389-ds-base-2.4.5-27.el9_4.s390x.rpm SHA-256: c5fa2ced4bc3d3001d5db7a0682cbf266e198edf31b5e0b14c987a45b7eaeb7e 389-ds-base-debuginfo-2.4.5-27.el9_4.s390x.rpm SHA-256: 4fd622dab22aee5a635c847fc60db1dc1d91b6244a00808ac6bec26084b90fd0 389-ds-base-debugsource-2.4.5-27.el9_4.s390x.rpm SHA-256: c4f9672cbbe1fd36703793b3b2a35ebec5408427161f5bc7121c734114e9078d 389-ds-base-libs-2.4.5-27.el9_4.s390x.rpm SHA-256: 0d1e3727560141ef7dd5358fde5c266bbaa81f8704c6e9a0f97c0058459f983a 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.s390x.rpm SHA-256: bcd0df9c2d6f1943a29dcc42ab27692db0a25fe1b7190a77093a99f614147ad9 389-ds-base-snmp-debuginfo-2.4.5-27.el9_4.s390x.rpm SHA-256: ac4cc1cc0361bd94e97b0bfaf85e468edd8989e9d5233b3f4cbaf9e7ae5c5cc0 python3-lib389-2.4.5-27.el9_4.noarch.rpm SHA-256: a97da25ad526b0bf5a96597b264c46ad08c1f85b1e0584cee75d46b07a1f1e33 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 x86_64 389-ds-base-2.4.5-27.el9_4.x86_64.rpm SHA-256: 59bbbe181993e859ab88c59ad757f472d6dc6aee359f892925e2426458190712 389-ds-base-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 82711d4d6fbdbc16c7eb3f39bf49f994a4c7c02af525d9e257ae883f5bf8b729 389-ds-base-debugsource-2.4.5-27.el9_4.x86_64.rpm SHA-256: 3b41330939672a6d2fcc688ef69fd834886ddc2cd2ba4b9ac7913a1a4d59244d 389-ds-base-libs-2.4.5-27.el9_4.x86_64.rpm SHA-256: 162a366aac1ea9048e11af13a48681fda2bd10a29989ecabd8e4c312a75a8cff 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 6d9e38234c4d682ad26f10a011416325e9c81ab35307611992f493756da09e49 389-ds-base-snmp-debuginfo-2.4.5-27.el9_4.x86_64.rpm SHA-256: 972eb3569dea1040d73e166a7807921174966a670038aeb2cec07fd04c4bbd1a python3-lib389-2.4.5-27.el9_4.noarch.rpm SHA-256: a97da25ad526b0bf5a96597b264c46ad08c1f85b1e0584cee75d46b07a1f1e33 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 SRPM 389-ds-base-2.4.5-27.el9_4.src.rpm SHA-256: 0c1025032e0b1bdc8e1503b783441b88fbcb3d24dac8930610701bc7c9a54fa0 aarch64 389-ds-base-2.4.5-27.el9_4.aarch64.rpm SHA-256: 7b49a656a26e83c4cd98b57ad86c0ffd325bc5a86b27ae1023e9155246888047 389-ds-base-debuginfo-2.4.5-27.el9_4.aarch64.rpm SHA-256: 0a56032b31ece0b2aa0684b47738951e964dd282440ba8452a1acf24cf7750dc 389-ds-base-debugsource-2.4.5-27.el9_4.aarch64.rpm SHA-256: ea5c598009c2d1f772a7ae24a0e65dfbd431dd145ab71cd9ac976d1429c1fc0f 389-ds-base-libs-2.4.5-27.el9_4.aarch64.rpm SHA-256: 7870e2cb09e3ac6724cec1ec929d9100996f047998b3831f94e8b855da12d91e 389-ds-base-libs-debuginfo-2.4.5-27.el9_4.aarch64.rpm SHA-256: d3aa768ced2889abbc534f0c3fc159e54a79a7d362067fce830856321cbd8d93 389-ds-base-snmp-