Red Hat Product Errata RHSA-2026:36196 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36196 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2484414 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND BZ - 2484916 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow CVEs CVE-2026-11610 CVE-2026-11774 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM 389-ds-base-3.2.0-8.el10_2.src.rpm SHA-256: 74e0c03d64441336489128e781559ec38de98f37fd559e11ef5d6f6cc1d92c75 x86_64 389-ds-base-3.2.0-8.el10_2.x86_64.rpm SHA-256: f27883d184f5d1900e9ad681e6a39f94f241669e7018777e0ca03577e67ae727 389-ds-base-bdb-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: 65d92b08f535b87f0b2019e764755b59efb7cca956515e26c1555ac38fdf03a9 389-ds-base-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: bfd278dc95785cf06572df5068413c054965085e3dba5c4c704b3928a55614df 389-ds-base-debugsource-3.2.0-8.el10_2.x86_64.rpm SHA-256: ed820e064a8795ca8a5db8832d9c6a5047127ac0f0b2315e04c376f8280538af 389-ds-base-libs-3.2.0-8.el10_2.x86_64.rpm SHA-256: b1901478091b0966e59c8f1e9579e9c5d6ad15f364f6ec4752dd05d0faf839f5 389-ds-base-libs-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: 418f366f87886b8c2795048edab30e0ffb092e0b12a1a5f7ca97ee5e5d3db5bd 389-ds-base-snmp-3.2.0-8.el10_2.x86_64.rpm SHA-256: c37cfed0a648cf1cf771813ebc3194bd821552657a329c83cfc57203bcfefdd2 389-ds-base-snmp-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: e67a893a1d13d8dfcbc27b2cb2085df0cf1ed4ebadd26c7be8baf336e5e8a339 python3-lib389-3.2.0-8.el10_2.noarch.rpm SHA-256: 9977881c3b570a9a8a48b87d6b3fd59587638923373126c95582f3026da8003d Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM 389-ds-base-3.2.0-8.el10_2.src.rpm SHA-256: 74e0c03d64441336489128e781559ec38de98f37fd559e11ef5d6f6cc1d92c75 x86_64 389-ds-base-3.2.0-8.el10_2.x86_64.rpm SHA-256: f27883d184f5d1900e9ad681e6a39f94f241669e7018777e0ca03577e67ae727 389-ds-base-bdb-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: 65d92b08f535b87f0b2019e764755b59efb7cca956515e26c1555ac38fdf03a9 389-ds-base-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: bfd278dc95785cf06572df5068413c054965085e3dba5c4c704b3928a55614df 389-ds-base-debugsource-3.2.0-8.el10_2.x86_64.rpm SHA-256: ed820e064a8795ca8a5db8832d9c6a5047127ac0f0b2315e04c376f8280538af 389-ds-base-libs-3.2.0-8.el10_2.x86_64.rpm SHA-256: b1901478091b0966e59c8f1e9579e9c5d6ad15f364f6ec4752dd05d0faf839f5 389-ds-base-libs-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: 418f366f87886b8c2795048edab30e0ffb092e0b12a1a5f7ca97ee5e5d3db5bd 389-ds-base-snmp-3.2.0-8.el10_2.x86_64.rpm SHA-256: c37cfed0a648cf1cf771813ebc3194bd821552657a329c83cfc57203bcfefdd2 389-ds-base-snmp-debuginfo-3.2.0-8.el10_2.x86_64.rpm SHA-256: e67a893a1d13d8dfcbc27b2cb2085df0cf1ed4ebadd26c7be8baf336e5e8a339 python3-lib389-3.2.0-8.el10_2.noarch.rpm SHA-256: 9977881c3b570a9a8a48b87d6b3fd59587638923373126c95582f3026da8003d Red Hat Enterprise Linux for IBM z Systems 10 SRPM 389-ds-base-3.2.0-8.el10_2.src.rpm SHA-256: 74e0c03d64441336489128e781559ec38de98f37fd559e11ef5d6f6cc1d92c75 s390x 389-ds-base-3.2.0-8.el10_2.s390x.rpm SHA-256: 71775d1f53e62f247af13de1f5609cfdef6ae8f4722a678475aaa049bd0e05f8 389-ds-base-bdb-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: 966e7aaa0922d504be1fb58e401ffd6a570b46db0f6378e39949bc80b33cda28 389-ds-base-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: cc95686a335dc7bf96de6ff9fda8e970bbc1622197bd6ca0e591f4619ce8cfed 389-ds-base-debugsource-3.2.0-8.el10_2.s390x.rpm SHA-256: f0a2a34d94d0f05fa5ae187b5a9d98068c748a7fdbc165147d0e30599a337c9f 389-ds-base-libs-3.2.0-8.el10_2.s390x.rpm SHA-256: 1b1f00045f4119476ed8327dd06972fef85d607e2cf743cd55c8274e77e3c419 389-ds-base-libs-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: 419a80279d12c58b162b36728695431bec7fd98e09ea9f84d31fc53b0052a23a 389-ds-base-snmp-3.2.0-8.el10_2.s390x.rpm SHA-256: 6ef015c288e4c12f923028b5eb6ac62b2ba24a6bc1f887964aea0e77ac3312a5 389-ds-base-snmp-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: 059ee734a7c87e016fc05c9e8b1f407ea53c5201b0d86078bfe3f25ac75c39b1 python3-lib389-3.2.0-8.el10_2.noarch.rpm SHA-256: 9977881c3b570a9a8a48b87d6b3fd59587638923373126c95582f3026da8003d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM 389-ds-base-3.2.0-8.el10_2.src.rpm SHA-256: 74e0c03d64441336489128e781559ec38de98f37fd559e11ef5d6f6cc1d92c75 s390x 389-ds-base-3.2.0-8.el10_2.s390x.rpm SHA-256: 71775d1f53e62f247af13de1f5609cfdef6ae8f4722a678475aaa049bd0e05f8 389-ds-base-bdb-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: 966e7aaa0922d504be1fb58e401ffd6a570b46db0f6378e39949bc80b33cda28 389-ds-base-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: cc95686a335dc7bf96de6ff9fda8e970bbc1622197bd6ca0e591f4619ce8cfed 389-ds-base-debugsource-3.2.0-8.el10_2.s390x.rpm SHA-256: f0a2a34d94d0f05fa5ae187b5a9d98068c748a7fdbc165147d0e30599a337c9f 389-ds-base-libs-3.2.0-8.el10_2.s390x.rpm SHA-256: 1b1f00045f4119476ed8327dd06972fef85d607e2cf743cd55c8274e77e3c419 389-ds-base-libs-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: 419a80279d12c58b162b36728695431bec7fd98e09ea9f84d31fc53b0052a23a 389-ds-base-snmp-3.2.0-8.el10_2.s390x.rpm SHA-256: 6ef015c288e4c12f923028b5eb6ac62b2ba24a6bc1f887964aea0e77ac3312a5 389-ds-base-snmp-debuginfo-3.2.0-8.el10_2.s390x.rpm SHA-256: 059ee734a7c87e016fc05c9e8b1f407ea53c5201b0d86078bfe3f25ac75c39b1 python3-lib389-3.2.0-8.el10_2.noarch.rpm SHA-256: 9977881c3b570a9a8a48b87d6b3fd59587638923373126c95582f3026da8003d Red Hat Enterprise Linux for Power, little endian 10 SRPM 389-ds-base-3.2.0-8.el10_2.src.rpm SHA-256: 74e0c03d64441336489128e781559ec38de98f37fd559e11ef5d6f6cc1d92c75 ppc64le 389-ds-base-3.2.0-8.el10_2.ppc64le.rpm SHA-256: ecf3ea64c23bf25cc2d096f6aa4f2b3e042ecf9fc098deadfa2e315597fc73c2 389-ds-base-bdb-debuginfo-3.2.0-8.el10_2.ppc64le.rpm SHA-256: fcf0709e50a104f5a27ee476cbe1a00cc2bf53da40da43ad94029a0eea41ef2e 389-ds-base-debuginfo-3.2.0-8.el10_2.ppc64le.rpm SHA-256: 35509c578c5064a0d167f98a0f8d1ca448603b220d17f842a857e22a4cb98742 389-ds-base-debugsource-3.2.0-8.el10_2.ppc64le.rpm SHA-256: 1400607c058871679f39d389a0600a92885444a1803122def10702dab43baf75 389-ds-base-libs-3.2.0-8.el10_2.ppc64le.rpm SHA-256: 700333bd464d12339111e80ed156df8eabd0b166b80c7d7569f204624f682c68 389-ds-base-libs-debuginfo-3.2.0-8.el10_2.ppc64le.rpm SHA-256: cedfeaed65f803b1da605a343dd1f5fe3afc57b632dffb9636398e6c5bc3d811 389-ds-base-snmp-3.2.0-8.el10_2.ppc64le.rpm SHA-256: 053e370d188fe5d1a00d62b0513f19aa8c2b0d3e56b28481db4c2ebf592ad932 389-ds-base-snmp-debuginfo-3.2.0-8.el10_2.ppc64le.rpm SHA-256: 26f92c81f987348118827b02a284d143178f5d3b535e3f66771920ba932247ee python3-lib389-3.2.0-8.el10_2.noarch.rpm SHA-256: 9977881c3