389-ds-base Critical Flaws: Heap Overflow and Auth Bypass Hit RHEL and AlmaLinux Directory Server Four real CVEs in 389-ds-base, up to CVSS 9.8, chain from an unauthenticated crash to Directory Manager privilege escalation. Affects RHEL/AlmaLinux Directory Server and FreeIPA. Oct 11, 2026 5 min read Linux
