Red Hat Product Errata RHSA-2026:64782 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64782 - Security Advisory Overview Updated Packages Synopsis Important: redhat-ds:12 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.6 EUS for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration. Security Fix(es): 389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor (CVE-2026-19843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Directory Server - Extended Update Support 12 for RHEL 9.6 x86_64 Fixes BZ - 2515965 - CVE-2026-19843 389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor CVEs CVE-2026-19843 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Directory Server - Extended Update Support 12 for RHEL 9.6 SRPM 389-ds-base-2.6.1-4.module+el9dsrv+24810+65883465.src.rpm SHA-256: f4279f79fa540b7cf77a94a7ee33107bfc29cbdc0d4e9ddc624b19f0476ea6fa x86_64 cockpit-389-ds-2.6.1-4.module+el9dsrv+24810+65883465.noarch.rpm SHA-256: 4f1c531d470333651850a64a949604cbc0a72de52f4c3922736525edfb5206fa The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .