Red Hat Product Errata RHSA-2026:26453 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26453 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2480093 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) CVEs CVE-2026-9064 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM 389-ds-base-1.3.11.1-12.el7_9.src.rpm SHA-256: 4469488c7df9b93730979508e9a8bbf603d2d1db774e050f2955b5b9c67b0dd7 x86_64 389-ds-base-1.3.11.1-12.el7_9.x86_64.rpm SHA-256: bb5a45887d2de9df420bff32b93e1d1d83a3066dd95e78ddd0b0ba8bbb4c8815 389-ds-base-debuginfo-1.3.11.1-12.el7_9.x86_64.rpm SHA-256: 84e6abad39d8886513282a5de9d017a9d335e123a054548ce02af9ba4a94ee8c 389-ds-base-debuginfo-1.3.11.1-12.el7_9.x86_64.rpm SHA-256: 84e6abad39d8886513282a5de9d017a9d335e123a054548ce02af9ba4a94ee8c 389-ds-base-devel-1.3.11.1-12.el7_9.x86_64.rpm SHA-256: 6f83de51a84d1ecb8b2de6309ccb6e4aeb94a9e5cae590279a972029a6364196 389-ds-base-libs-1.3.11.1-12.el7_9.x86_64.rpm SHA-256: dfcbdd8417eb877d1512426844dc058abdfa123ede3dbbe273c961f56ad01f47 389-ds-base-snmp-1.3.11.1-12.el7_9.x86_64.rpm SHA-256: 2eef5a0c86b683c79d483eddc8fed66c084447957f0b723f6ebea9c0c77fc011 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM 389-ds-base-1.3.11.1-12.el7_9.src.rpm SHA-256: 4469488c7df9b93730979508e9a8bbf603d2d1db774e050f2955b5b9c67b0dd7 s390x 389-ds-base-1.3.11.1-12.el7_9.s390x.rpm SHA-256: be780b6a978036539053de9f28b8e353d455b363254658bbfbb8a2e9a4f4b6b4 389-ds-base-debuginfo-1.3.11.1-12.el7_9.s390x.rpm SHA-256: 262e6480b4383a08bf29797fdc9a924cee03aa2fd6146feb83273044895597a6 389-ds-base-devel-1.3.11.1-12.el7_9.s390x.rpm SHA-256: fedfcdc99ad8f357255775ba6173163d7f88327358c1dafd3f3f7c13b88e8ced 389-ds-base-libs-1.3.11.1-12.el7_9.s390x.rpm SHA-256: 189166df85626982be2e4329ad7b7e49de14af5b53c285050ce57255fc1920b1 389-ds-base-snmp-1.3.11.1-12.el7_9.s390x.rpm SHA-256: db783530800b568af4fe4981146c2d5fb804c544b9c498ce3c86b178dd4238f6 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM 389-ds-base-1.3.11.1-12.el7_9.src.rpm SHA-256: 4469488c7df9b93730979508e9a8bbf603d2d1db774e050f2955b5b9c67b0dd7 ppc64 389-ds-base-1.3.11.1-12.el7_9.ppc64.rpm SHA-256: ce336d4c303ddde4e594ab2823c09c039d1dfc5ed13941f40ca0a00581859d73 389-ds-base-debuginfo-1.3.11.1-12.el7_9.ppc64.rpm SHA-256: 9e7a38a66bdb29d5daace9d35e2c6259f12eae38776f9fd807259747693005bd 389-ds-base-devel-1.3.11.1-12.el7_9.ppc64.rpm SHA-256: d7460eb91bbe3803fe38c9776415d6ff9b32607eed380ec4cd5b103ea52b5f7f 389-ds-base-libs-1.3.11.1-12.el7_9.ppc64.rpm SHA-256: d87f104c1ec2c1218579209d25b3603c3df0e0c997f9bc37eb0a544bf55f78a3 389-ds-base-snmp-1.3.11.1-12.el7_9.ppc64.rpm SHA-256: 03a922af479f3d984b789003d18e6d7737c344067f122b6c73f26e2f4b018c0a Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM 389-ds-base-1.3.11.1-12.el7_9.src.rpm SHA-256: 4469488c7df9b93730979508e9a8bbf603d2d1db774e050f2955b5b9c67b0dd7 ppc64le 389-ds-base-1.3.11.1-12.el7_9.ppc64le.rpm SHA-256: 72af3128a7134a0fe22811679689c7dd54517301698b76e3570245dbab5d0739 389-ds-base-debuginfo-1.3.11.1-12.el7_9.ppc64le.rpm SHA-256: ff0f44318d5198fbc5016f9a5185c10bcb39345b173cbad59f1688502cd10c6c 389-ds-base-debuginfo-1.3.11.1-12.el7_9.ppc64le.rpm SHA-256: ff0f44318d5198fbc5016f9a5185c10bcb39345b173cbad59f1688502cd10c6c 389-ds-base-devel-1.3.11.1-12.el7_9.ppc64le.rpm SHA-256: 47b57016169056804cef6a5fa14995e0adb63c60dd6724f18378482dd861761c 389-ds-base-libs-1.3.11.1-12.el7_9.ppc64le.rpm SHA-256: 3ac430f78d9aaae18b5aca0e00b9dafd4977ec5a12d54f28b10e4533238e9e59 389-ds-base-snmp-1.3.11.1-12.el7_9.ppc64le.rpm SHA-256: 4122c2ef8ef29d53339653dc2c405065ccc49db4f0ac13956b2f3efb32fb3e18 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .