Red Hat Product Errata RHSA-2026:65375 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:65375 - Security Advisory Overview Updated Packages Synopsis Important: redhat-ds:12 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.8 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration. Additional Changes: For detailed information on changes in this release, see the Red Hat Directory Server 12.8 for RHEL 9 Release Notes linked from the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Directory Server 12 x86_64 Fixes BZ - 2515965 - CVE-2026-19843 389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor CVEs CVE-2026-19843 References https://access.redhat.com/security/updates/classification/#important https://docs.redhat.com/en/documentation/red_hat_directory_server/12/html/red_hat_directory_server_12_release_notes/index Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Directory Server 12 SRPM 389-ds-base-2.8.0-7.module+el9dsrv+24844+8988a132.src.rpm SHA-256: ff6e048f3d02d766664df1f421e3ffc78caad484ef334abda3ab700d417b29ef x86_64 cockpit-389-ds-2.8.0-7.module+el9dsrv+24844+8988a132.noarch.rpm SHA-256: a30a1fc886c0ba74775b485dd577b3154438f34298cec9cc1830e0cc6a82abb3 cockpit-389-ds-2.8.0-7.module+el9dsrv+24844+8988a132.noarch.rpm SHA-256: a30a1fc886c0ba74775b485dd577b3154438f34298cec9cc1830e0cc6a82abb3 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .