Red Hat Product Errata RHSA-2026:26599 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26599 - Security Advisory Overview Updated Packages Synopsis Important: redhat-ds:12 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration. Security Fix(es): 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Directory Server - 4 years of updates 12 for RHEL 9.4 x86_64 Fixes BZ - 2480093 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) CVEs CVE-2026-9064 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Directory Server - 4 years of updates 12 for RHEL 9.4 SRPM 389-ds-base-2.4.5-23.module+el9dsrv+24381+1cd2f394.src.rpm SHA-256: 5e47143c83f82ed14bb629fccff428b60e36738a34296174fe15de7e2c56ad53 x86_64 389-ds-base-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: 9f4fb9d192c10776b73036b3eb1e85146a4e500fb8b10d85426d1503016dea5b 389-ds-base-debuginfo-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: 0688d08cae13b0eca9d0e4d289b6c1a362dd3b91c1904b14933823e56dcc1374 389-ds-base-debugsource-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: 5ccb2b2eec5e880018a73466e42454f0218aa4f2ac97a5a7d2884d136df7ae90 389-ds-base-devel-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: 912e411868ce5e57c52738194a7ae61854352e017fb97aa43f74dc2488f6a18d 389-ds-base-libs-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: 67effd17724160e8746659e54bdc0b599bf6f945fcde137b544a7a891c088164 389-ds-base-libs-debuginfo-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: ef9e6e86cea7fb9c5e35110c4739941791f3c5a87f40cb313acf1c9a168e9569 389-ds-base-snmp-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: 5f92c1d83dcd48414f87979a21970bded19f291e3969a74519e17eb83f5f1486 389-ds-base-snmp-debuginfo-2.4.5-23.module+el9dsrv+24381+1cd2f394.x86_64.rpm SHA-256: b990d9d592ee82a0760c62abeeaf45e37b110e162b3a19054903edb03b3104cb cockpit-389-ds-2.4.5-23.module+el9dsrv+24381+1cd2f394.noarch.rpm SHA-256: 794675ec8aca8fdb645bcb044866e1bd85fce86133cf3bd495d542b6aead0ac1 python3-lib389-2.4.5-23.module+el9dsrv+24381+1cd2f394.noarch.rpm SHA-256: da07d21ac76926bc7a83bd99b53045c1f46021fba9851e3cbcdc82f74f9cc126 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .