Red Hat Product Errata RHSA-2026:26458 - Security Advisory
Issued:
2026-06-17
Updated:
2026-06-17

RHSA-2026:26458 - Security Advisory

Synopsis

Important: redhat-ds:11 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Directory Server 11.9 for RHEL 8 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Directory Server 11.9 x86_64

Fixes

  • BZ - 2480093 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS)

Red Hat Directory Server 11.9

SRPM
389-ds-base-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.src.rpm SHA-256: 5116fc0744e1603877382ba50898de1d5de118ebbe123c9e2fce7d979ebdc856
x86_64
389-ds-base-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 19886a9d6656675296bb66f018d2c1cea9f3a434639bb2af73025df10e4106d2
389-ds-base-debuginfo-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 29310cfacdc10f6b224e3fa1ee3b7c0e663789e24a23423cf7266e4890e3e58b
389-ds-base-debugsource-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: ee85ab021a7191c0a304f790808d63de24fcd89761c03e639d79711b58d5eba1
389-ds-base-devel-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: e6aa77dd1e9935142e209e147cdfeb011c27eefb2a07b4925f3e71541a64b181
389-ds-base-legacy-tools-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 58826c8faa3ad1b864eb30148b2e21c3983b93de6e4c2ef94f2d29069e0d2550
389-ds-base-legacy-tools-debuginfo-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 854dda68050d30ec2931e83c2b348d4c28806aca27f6efca09794f5edf86141b
389-ds-base-libs-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 18d9cb9c555088ab1eee003a49cf01a25af3c70993d68eec3587e65471863f9b
389-ds-base-libs-debuginfo-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: c939f8f6b8354b19fc49aff6fae42ea214bec9462b6caec7a632c7200e624bf2
389-ds-base-snmp-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 99f6af4c7bcd34603859dd5c97c27202f31760c8b70837ccb4dd6e123af2dfe3
389-ds-base-snmp-debuginfo-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.x86_64.rpm SHA-256: 02af54cf0d78e1c175e69e8927406fb44a076a518dc4c0a07ae1d36a484d76fa
cockpit-389-ds-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.noarch.rpm SHA-256: 75f591dbb8c6a0d0282c81e016acf6eb3119dd2e6e39be29771b826573ab8eee
python3-lib389-1.4.3.39-24.module+el8dsrv+24341+2b6b9665.noarch.rpm SHA-256: 11df9971aef175a93fb1d92a3a54228fee229ebfaedcfe2a6147b300d0a8b7f9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.