Red Hat Enterprise Linux (389-ds-base): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.5
  CVE-2026-11770

  389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

  A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication p…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Jul 31, 2026
• High 7.5
  CVE-2026-15722

  389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

  A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remo…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Jul 31, 2026
• Medium 5.9
  CVE-2026-11788

  389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

  A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu
  Jun 9, 2026

Revision history

1. 2026-10-29 #14

   Neue Updates von SUSE aufgenommen

2. 2026-10-14 #13

   Neue Updates von Oracle Linux aufgenommen

3. 2026-10-08 #12

   Neue Updates von Red Hat aufgenommen

4. 2026-09-29 #11

   Neue Updates von SUSE aufgenommen

5. 2026-09-28 #10

   Neue Updates von Amazon und SUSE aufgenommen

6. 2026-09-27 #9

   Neue Updates von openSUSE aufgenommen

7. 2026-09-21 #8

   Neue Updates von Oracle Linux aufgenommen

8. 2026-09-16 #7

   Neue Updates von SUSE aufgenommen

9. 2026-09-13 #6

   Neue Updates von openSUSE aufgenommen

10. 2026-09-10 #5

    Neue Updates von Oracle Linux aufgenommen

11. 2026-09-08 #4

    Neue Updates von Oracle Linux aufgenommen

12. 2026-09-07 #3

    Neue Updates von Fedora aufgenommen

13. 2026-08-17 #2

    Neue Updates von Red Hat, Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

14. 2026-08-16 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:55421 vom 2026-08-16
  https://access.redhat.com/errata/RHSA-2026:55421
• Red Hat Security Advisory RHSA-2026:55422 vom 2026-08-16
  https://access.redhat.com/errata/RHSA-2026:55422
• Red Hat Security Advisory RHSA-2026:55425 vom 2026-08-16
  https://access.redhat.com/errata/RHSA-2026:55425
• Red Hat Security Advisory RHSA-2026:55426 vom 2026-08-16
  https://access.redhat.com/errata/RHSA-2026:55426
• Red Hat Security Advisory RHSA-2026:55530 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55530
• Red Hat Security Advisory RHSA-2026:55532 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55532
• Red Hat Security Advisory RHSA-2026:55423 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55423
• Red Hat Security Advisory RHSA-2026:55424 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55424
• Red Hat Security Advisory RHSA-2026:55756 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55756
• Red Hat Security Advisory RHSA-2026:55758 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55758
• Oracle Linux Security Advisory ELSA-2026-55530 vom 2026-08-17
  https://linux.oracle.com/errata/ELSA-2026-55530.html
• Rocky Linux Security Advisory RLSA-2026:55530 vom 2026-08-17
  https://errata.build.resf.org/RLSA-2026:55530
• Oracle Linux Security Advisory ELSA-2026-55424 vom 2026-08-17
  https://linux.oracle.com/errata/ELSA-2026-55424.html
• Rocky Linux Security Advisory RLSA-2026:55423 vom 2026-08-17
  https://errata.build.resf.org/RLSA-2026:55423
• Rocky Linux Security Advisory RLSA-2026:55424 vom 2026-08-17
  https://errata.build.resf.org/RLSA-2026:55424
• Oracle Linux Security Advisory ELSA-2026-55423 vom 2026-08-17
  https://linux.oracle.com/errata/ELSA-2026-55423.html
• Red Hat Security Advisory RHSA-2026:55794 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:55794
• Red Hat Security Advisory RHSA-2026:55757 vom 2026-08-17
  https://access.redhat.com/errata/RHSA-2026:55757
• Red Hat Security Advisory RHSA-2026:56047 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:56047
• Red Hat Security Advisory RHSA-2026:56048 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:56048
• Red Hat Security Advisory RHSA-2026:56050 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:56050
• Fedora Security Advisory FEDORA-2026-C1E25A4642 vom 2026-09-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-c1e25a4642
• Fedora Security Advisory FEDORA-2026-0B8BC362B1 vom 2026-09-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-0b8bc362b1
• Fedora Security Advisory FEDORA-2026-B16C9CBC0F vom 2026-09-07
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-b16c9cbc0f
• Oracle Linux Security Advisory ELSA-2026-64785 vom 2026-09-08
  https://linux.oracle.com/errata/ELSA-2026-64785-0.html
• Oracle Linux Security Advisory ELSA-2026-64784 vom 2026-09-08
  https://linux.oracle.com/errata/ELSA-2026-64784-0.html
• Oracle Linux Security Advisory ELSA-2026-64791 vom 2026-09-10
  https://linux.oracle.com/errata/ELSA-2026-64791-0.html
• openSUSE Security Update OPENSUSE-SU-2026:11739-1 vom 2026-09-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OO2XUMAZDWAYTEN72PTY73A7QOVZZPSQ/
• SUSE Security Update SUSE-SU-2026:23574-1 vom 2026-09-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029105.html
• Oracle Linux Security Advisory ELSA-2026-55758 vom 2026-09-22
  https://linux.oracle.com/errata/ELSA-2026-55758.html
• openSUSE Security Update OPENSUSE-SU-2026:21950-1 vom 2026-09-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6KUXRCBYG6C3BARUFT5SVVKDYVDM4VV4/
• Amazon Linux Security Advisory ALAS2-2026-3926 vom 2026-09-29
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3926.html
• SUSE Security Update SUSE-SU-2026:4380-1 vom 2026-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029421.html
• SUSE Security Update SUSE-SU-2026:23916-1 vom 2026-09-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029462.html
• Red Hat Security Advisory RHSA-2026:79217 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:79217
• Oracle Linux Security Advisory ELSA-2026-64771 vom 2026-10-15
  https://linux.oracle.com/errata/ELSA-2026-64771-0.html
• SUSE Security Update SUSE-SU-2026:4929-1 vom 2026-10-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/030248.html
• SUSE Security Update SUSE-SU-2026:4932-1 vom 2026-10-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/030245.html