Red Hat Product Errata RHSA-2026:26597 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26597 - Security Advisory Overview Updated Packages Synopsis Important: redhat-ds:11 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 E4S for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration. Security Fix(es): 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Directory Server - 4 years of updates 11 for RHEL 8.8 x86_64 Fixes BZ - 2480093 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) CVEs CVE-2026-9064 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Directory Server - 4 years of updates 11 for RHEL 8.8 SRPM 389-ds-base-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.src.rpm SHA-256: a2c080faea54a6f47f5abb63434e275803d6f4f57f3bf3b839e34134d0e76dbe x86_64 389-ds-base-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: e0e43a7c8f47233689b60fc7cba87b99ed1f31e123f73cae663c701ea8831641 389-ds-base-debuginfo-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: c9ff748470cf30edb12e67e67c6ec267fc06ec1687368df62ed945d7cb812f0d 389-ds-base-debugsource-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: febd2804d727497e6e465e11ed889ead3d05ba1f80cf19609bd9d3fde9063a8d 389-ds-base-devel-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: 9b4df923db944487537afe039a47aa5049b49f3e288cae0e6a7931f805005ed2 389-ds-base-legacy-tools-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: 3d4912bbb49d8aa29d0c24ae97f3cf676fdad53c2d537de9ba5d4680ecbd8610 389-ds-base-legacy-tools-debuginfo-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: 1c7aad6a4efab1542d811f71bd865c85944dad82994d5ea0940e58dd5817baa4 389-ds-base-libs-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: 5d8759aa0a20d36b19921e35bfa7840443f4a32248f9bdc888bcda67b36fc550 389-ds-base-libs-debuginfo-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: e8f98dda4276b1b593f3764f837ea80f2ab4b24d4361e5116f026ad172e556ae 389-ds-base-snmp-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: b5a513a080a3a3cb8ebbf8759ea51bd927cde34ca27e20d87e86a89e7e6f818f 389-ds-base-snmp-debuginfo-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.x86_64.rpm SHA-256: 2f03483d69f33fbcfd26069050d292253bfff85c05b6b1f6f8e493cc05451434 cockpit-389-ds-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.noarch.rpm SHA-256: d06f1bd65af4638bc68f7a4cfd2995565c05637c100c07116a803a41294205ac python3-lib389-1.4.3.34-15.module+el8dsrv+24378+c77f3fdd.noarch.rpm SHA-256: 9dcfdd7f87086a7117bea126533f01a93d169dd4a3bed525ad08640a994f0020 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .