Red Hat Product Errata RHSA-2026:36200 - Security Advisory
Issued:
2026-07-07
Updated:
2026-07-07

RHSA-2026:36200 - Security Advisory

Synopsis

Important: redhat-ds:11 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Directory Server 11.9 for RHEL 8 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Directory Server 11.9 x86_64

Fixes

  • BZ - 2484414 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND
  • BZ - 2484916 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow

Red Hat Directory Server 11.9

SRPM
389-ds-base-1.4.3.39-25.module+el8dsrv+24463+e272972e.src.rpm SHA-256: 0ccd4b2c8adce6d6f0a0f3d34bfe5c16d34adb410198dea5f942207fa1d2b85b
x86_64
389-ds-base-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 362b968423cfceb8d409807c2d33c3984ac7d8db4a56ba2df3f27a315e7c7c11
389-ds-base-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: cfaaa677b995a29e901acdd0c022850c1f60fe99b6721f5237cea98a74177557
389-ds-base-debugsource-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 67b01e5fc1df15e6cd7e8cc8ef23e980969b2460d7acbfb32cfd0f40c80909fa
389-ds-base-devel-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 667e86431ff0f73948afde79e144355a2964584744a966083d97288eb120e751
389-ds-base-legacy-tools-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 378d0649b10891311b05f4f0d03ef1d97981cfb5fd1eb74ebf1e53d8b61e1f1b
389-ds-base-legacy-tools-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 0b07179b67f8f082fc565df23bfdc0f55dc0c088eab77544f192fe67223b726b
389-ds-base-libs-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: e0de7a292b1bf3c4a5922982cac7bd149b1b928d959069dc323dab05a308c1cd
389-ds-base-libs-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 8da6aef3a16ecc93d1e5d2d3dc4fb4a6809bee09173448a056f046c32554491c
389-ds-base-snmp-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 93403caa4b59027dc790c55338be2f3e815eedacf2d50a49678f9d6e9b7a1e72
389-ds-base-snmp-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 1dcbb0c91fbd71229faf8420fc941bf65dd20925cbe4e374d5beb2821eaa0168
cockpit-389-ds-1.4.3.39-25.module+el8dsrv+24463+e272972e.noarch.rpm SHA-256: 4edc62971ad2fc6b90e3234c231124cadfe24b3692a892d33ddc547fb6044830
python3-lib389-1.4.3.39-25.module+el8dsrv+24463+e272972e.noarch.rpm SHA-256: 4e7ba062345ba986b70c5ba62c629061c98767c2333483d08ed3a37e43afbb52

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.