Red Hat Product Errata RHSA-2026:4720 - Security Advisory
Issued:
2026-03-17
Updated:
2026-03-17

RHSA-2026:4720 - Security Advisory

Synopsis

Moderate: 389-ds-base security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2423624 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
x86_64
389-ds-base-2.4.5-24.el9_4.x86_64.rpm SHA-256: b2c187496fcce84dd98186575bc00b1ef268ac8ae7c41a2a39e24ae453e866ea
389-ds-base-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: f5ea472b3bded93603b37a2f1edd1ddce2f6630ce54ecff73d77a0af7b4dcd15
389-ds-base-debugsource-2.4.5-24.el9_4.x86_64.rpm SHA-256: 84de064c8311ad336f9d5fed64a041b8fb761a099fa22a02d4138b656a4a57aa
389-ds-base-libs-2.4.5-24.el9_4.x86_64.rpm SHA-256: 39e4707fc8e2a17b98332edc21752aa0a7091dfc55b50e741663ba0af9b581f3
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: 01a86bb030980eca953cf20ba0cafca1bdc2a08a81794cff50677aa47f44274a
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: ab619111bc3bfb1f5478600d727d1ce124de33a6ef291b99e93f01d5ec97f15f
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
x86_64
389-ds-base-2.4.5-24.el9_4.x86_64.rpm SHA-256: b2c187496fcce84dd98186575bc00b1ef268ac8ae7c41a2a39e24ae453e866ea
389-ds-base-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: f5ea472b3bded93603b37a2f1edd1ddce2f6630ce54ecff73d77a0af7b4dcd15
389-ds-base-debugsource-2.4.5-24.el9_4.x86_64.rpm SHA-256: 84de064c8311ad336f9d5fed64a041b8fb761a099fa22a02d4138b656a4a57aa
389-ds-base-libs-2.4.5-24.el9_4.x86_64.rpm SHA-256: 39e4707fc8e2a17b98332edc21752aa0a7091dfc55b50e741663ba0af9b581f3
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: 01a86bb030980eca953cf20ba0cafca1bdc2a08a81794cff50677aa47f44274a
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: ab619111bc3bfb1f5478600d727d1ce124de33a6ef291b99e93f01d5ec97f15f
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
s390x
389-ds-base-2.4.5-24.el9_4.s390x.rpm SHA-256: 7631dfeee0c6950e20e182bf1be592a023213d86ef49b0b512128963b9bdc402
389-ds-base-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: df6f0360292f89731f694e919a1368cdf294d2f50c356d4a7a131957df168f85
389-ds-base-debugsource-2.4.5-24.el9_4.s390x.rpm SHA-256: 00b3aac74ccc56f096e69f0142c128b0dc5043ed95623274500079119451362e
389-ds-base-libs-2.4.5-24.el9_4.s390x.rpm SHA-256: 6e3f8f48c183741b1965c249e794b8fec687acc7fe15dbcd3382ac4cf8bfcc00
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: 137cfd264bc0ed18d07aaf429515adc0124d0f229a2e7b6ab0dc92696278213f
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: a85337bd7a710a4040ee59c6b3b75b2e1b98020e6bf296fd02461b90efd39f88
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
ppc64le
389-ds-base-2.4.5-24.el9_4.ppc64le.rpm SHA-256: c1f67a5b238636ea9e8c107515a6a3b9280574f255211a29c7831c4062b97c1e
389-ds-base-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: bed477371593a37283d4a88d7322b1795c30e57ac5ae3e750e86303d8709a396
389-ds-base-debugsource-2.4.5-24.el9_4.ppc64le.rpm SHA-256: 14aef1c8151dc12cd0a72eb717d13c25d858be4090019c3369d4cf437f620f13
389-ds-base-libs-2.4.5-24.el9_4.ppc64le.rpm SHA-256: f28842038ea2639c16c8a319332ba85b1c684046b0b561006f9fd2548d5031b7
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: efed4d0352f9fb8f6605cc6fd512a9cb4c6515091a775c2da0459c2d62c785ce
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: f1d7303fea3da25e0bb563526aa7ade3507d680a33eda8a3d7972b61d4a18ec5
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
aarch64
389-ds-base-2.4.5-24.el9_4.aarch64.rpm SHA-256: fdc423c38013e41f52c3ee00b246645fb6af6f0278d5b3afdfda8623269738fc
389-ds-base-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 2121ab5122b7deb5352bbc59df870eec8b7371301a6f276a2215ace31346e927
389-ds-base-debugsource-2.4.5-24.el9_4.aarch64.rpm SHA-256: cfde729ef9df6476a7889d30b49015cfd588d3749cd0d202365aea970e55473a
389-ds-base-libs-2.4.5-24.el9_4.aarch64.rpm SHA-256: a121db62c27015b602a94ac80e1d9ac5959c8e93f9e9b3f4d65b422997c4436b
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 972b202495ebc284c75d94577ffaf6a213da942606ea5dd432274b6d31e37c4c
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 3ef63f0bd1148cc49724c4ff3f92cd60465a3cd46a4ca66960ebb28cb14f29cd
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
ppc64le
389-ds-base-2.4.5-24.el9_4.ppc64le.rpm SHA-256: c1f67a5b238636ea9e8c107515a6a3b9280574f255211a29c7831c4062b97c1e
389-ds-base-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: bed477371593a37283d4a88d7322b1795c30e57ac5ae3e750e86303d8709a396
389-ds-base-debugsource-2.4.5-24.el9_4.ppc64le.rpm SHA-256: 14aef1c8151dc12cd0a72eb717d13c25d858be4090019c3369d4cf437f620f13
389-ds-base-libs-2.4.5-24.el9_4.ppc64le.rpm SHA-256: f28842038ea2639c16c8a319332ba85b1c684046b0b561006f9fd2548d5031b7
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: efed4d0352f9fb8f6605cc6fd512a9cb4c6515091a775c2da0459c2d62c785ce
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: f1d7303fea3da25e0bb563526aa7ade3507d680a33eda8a3d7972b61d4a18ec5
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
x86_64
389-ds-base-2.4.5-24.el9_4.x86_64.rpm SHA-256: b2c187496fcce84dd98186575bc00b1ef268ac8ae7c41a2a39e24ae453e866ea
389-ds-base-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: f5ea472b3bded93603b37a2f1edd1ddce2f6630ce54ecff73d77a0af7b4dcd15
389-ds-base-debugsource-2.4.5-24.el9_4.x86_64.rpm SHA-256: 84de064c8311ad336f9d5fed64a041b8fb761a099fa22a02d4138b656a4a57aa
389-ds-base-libs-2.4.5-24.el9_4.x86_64.rpm SHA-256: 39e4707fc8e2a17b98332edc21752aa0a7091dfc55b50e741663ba0af9b581f3
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: 01a86bb030980eca953cf20ba0cafca1bdc2a08a81794cff50677aa47f44274a
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: ab619111bc3bfb1f5478600d727d1ce124de33a6ef291b99e93f01d5ec97f15f
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4

SRPM
x86_64
389-ds-base-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: f5ea472b3bded93603b37a2f1edd1ddce2f6630ce54ecff73d77a0af7b4dcd15
389-ds-base-debugsource-2.4.5-24.el9_4.x86_64.rpm SHA-256: 84de064c8311ad336f9d5fed64a041b8fb761a099fa22a02d4138b656a4a57aa
389-ds-base-devel-2.4.5-24.el9_4.x86_64.rpm SHA-256: 9b639080b6377d220c7c542b4205d2e51be0ebbdb2b057eb60159e6fde4e52cb
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: 01a86bb030980eca953cf20ba0cafca1bdc2a08a81794cff50677aa47f44274a
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.x86_64.rpm SHA-256: ab619111bc3bfb1f5478600d727d1ce124de33a6ef291b99e93f01d5ec97f15f

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4

SRPM
ppc64le
389-ds-base-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: bed477371593a37283d4a88d7322b1795c30e57ac5ae3e750e86303d8709a396
389-ds-base-debugsource-2.4.5-24.el9_4.ppc64le.rpm SHA-256: 14aef1c8151dc12cd0a72eb717d13c25d858be4090019c3369d4cf437f620f13
389-ds-base-devel-2.4.5-24.el9_4.ppc64le.rpm SHA-256: b4511e791475520e60056773220dd05cf1d4fa4c94b0d095b5e0ec202fc66aa4
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: efed4d0352f9fb8f6605cc6fd512a9cb4c6515091a775c2da0459c2d62c785ce
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.ppc64le.rpm SHA-256: f1d7303fea3da25e0bb563526aa7ade3507d680a33eda8a3d7972b61d4a18ec5

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4

SRPM
s390x
389-ds-base-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: df6f0360292f89731f694e919a1368cdf294d2f50c356d4a7a131957df168f85
389-ds-base-debugsource-2.4.5-24.el9_4.s390x.rpm SHA-256: 00b3aac74ccc56f096e69f0142c128b0dc5043ed95623274500079119451362e
389-ds-base-devel-2.4.5-24.el9_4.s390x.rpm SHA-256: 525c852762c9f34ffe7e1703e29325a89216455fbe9bb91a5acaf685604e7e85
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: 137cfd264bc0ed18d07aaf429515adc0124d0f229a2e7b6ab0dc92696278213f
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: a85337bd7a710a4040ee59c6b3b75b2e1b98020e6bf296fd02461b90efd39f88

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4

SRPM
aarch64
389-ds-base-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 2121ab5122b7deb5352bbc59df870eec8b7371301a6f276a2215ace31346e927
389-ds-base-debugsource-2.4.5-24.el9_4.aarch64.rpm SHA-256: cfde729ef9df6476a7889d30b49015cfd588d3749cd0d202365aea970e55473a
389-ds-base-devel-2.4.5-24.el9_4.aarch64.rpm SHA-256: 6f5babb6dc915a120bf2a2405ad515cf769ab0aa5e9b29805071e80b78f02f54
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 972b202495ebc284c75d94577ffaf6a213da942606ea5dd432274b6d31e37c4c
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 3ef63f0bd1148cc49724c4ff3f92cd60465a3cd46a4ca66960ebb28cb14f29cd

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
aarch64
389-ds-base-2.4.5-24.el9_4.aarch64.rpm SHA-256: fdc423c38013e41f52c3ee00b246645fb6af6f0278d5b3afdfda8623269738fc
389-ds-base-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 2121ab5122b7deb5352bbc59df870eec8b7371301a6f276a2215ace31346e927
389-ds-base-debugsource-2.4.5-24.el9_4.aarch64.rpm SHA-256: cfde729ef9df6476a7889d30b49015cfd588d3749cd0d202365aea970e55473a
389-ds-base-libs-2.4.5-24.el9_4.aarch64.rpm SHA-256: a121db62c27015b602a94ac80e1d9ac5959c8e93f9e9b3f4d65b422997c4436b
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 972b202495ebc284c75d94577ffaf6a213da942606ea5dd432274b6d31e37c4c
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.aarch64.rpm SHA-256: 3ef63f0bd1148cc49724c4ff3f92cd60465a3cd46a4ca66960ebb28cb14f29cd
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
389-ds-base-2.4.5-24.el9_4.src.rpm SHA-256: 4654047bfabd41b590fdec15bf638f4562fe6224ad4e795c078afd60d28b6679
s390x
389-ds-base-2.4.5-24.el9_4.s390x.rpm SHA-256: 7631dfeee0c6950e20e182bf1be592a023213d86ef49b0b512128963b9bdc402
389-ds-base-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: df6f0360292f89731f694e919a1368cdf294d2f50c356d4a7a131957df168f85
389-ds-base-debugsource-2.4.5-24.el9_4.s390x.rpm SHA-256: 00b3aac74ccc56f096e69f0142c128b0dc5043ed95623274500079119451362e
389-ds-base-libs-2.4.5-24.el9_4.s390x.rpm SHA-256: 6e3f8f48c183741b1965c249e794b8fec687acc7fe15dbcd3382ac4cf8bfcc00
389-ds-base-libs-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: 137cfd264bc0ed18d07aaf429515adc0124d0f229a2e7b6ab0dc92696278213f
389-ds-base-snmp-debuginfo-2.4.5-24.el9_4.s390x.rpm SHA-256: a85337bd7a710a4040ee59c6b3b75b2e1b98020e6bf296fd02461b90efd39f88
python3-lib389-2.4.5-24.el9_4.noarch.rpm SHA-256: 2dca5e167218991bbc1242f7997ad0171dde2a69c37040dec80223a190ca8ab2

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.