This security update addresses two high-severity vulnerabilities (CVE-2026-11610, CVSS 8.8, and CVE-2026-11774, CVSS 7.6) in the 389-ds-base LDAP server, involving heap buffer overflows and an integer overflow in SASL packet handling. The article is a Red Hat advisory for RHEL 9, but it does not provide specific affected or fixed version numbers for the 389-ds-base package itself. The recommended action is to apply the update via the referenced Red Hat solution article.
Red Hat Product Errata RHSA-2026:36195 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36195 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2484414 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND BZ - 2484916 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow CVEs CVE-2026-11610 CVE-2026-11774 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM 389-ds-base-2.8.0-8.el9_8.src.rpm SHA-256: 01107570430df26f7140333f297b22190db7c8974947e95e8d6de167740894f0 x86_64 389-ds-base-2.8.0-8.el9_8.x86_64.rpm SHA-256: 4e33196e36024facde89ee7d45f90dc499cffaa179d73be3e8ddda158386751b 389-ds-base-debuginfo-2.8.0-8.el9_8.x86_64.rpm SHA-256: f0ebbf6cca8c7277d54b91ac2e536d44b427ef91021a87108c48ed3f2751fdb6 389-ds-base-debugsource-2.8.0-8.el9_8.x86_64.rpm SHA-256: 04b1c6603c7c6817ad9746cee268fa2d725b1d61ea7d77e030423f79975ba7a0 389-ds-base-libs-2.8.0-8.el9_8.x86_64.rpm SHA-256: 9b5852c76c8d03350d4b612a07eb941168781a170c112d69510c2c6eb3af4053 389-ds-base-libs-debuginfo-2.8.0-8.el9_8.x86_64.rpm SHA-256: 7fd3b1c3b3066f02c3ffb10eecc63334bd00977415f6597833ac5bbc232dde87 389-ds-base-snmp-2.8.0-8.el9_8.x86_64.rpm SHA-256: 10277724a399ce62759b423dab4b5c114e1cf25e25d613321cb8798c0184305e 389-ds-base-snmp-debuginfo-2.8.0-8.el9_8.x86_64.rpm SHA-256: c973dcf9c32cf2a70c5d0621479d225c65661fae04c9d123f1b5843e392a0b72 python3-lib389-2.8.0-8.el9_8.noarch.rpm SHA-256: 75a187ffece219f94b45d99baa435164e08d12f5c6ee254152548e931a2145ab Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM 389-ds-base-2.8.0-8.el9_8.src.rpm SHA-256: 01107570430df26f7140333f297b22190db7c8974947e95e8d6de167740894f0 x86_64 389-ds-base-2.8.0-8.el9_8.x86_64.rpm SHA-256: 4e33196e36024facde89ee7d45f90dc499cffaa179d73be3e8ddda158386751b 389-ds-base-debuginfo-2.8.0-8.el9_8.x86_64.rpm SHA-256: f0ebbf6cca8c7277d54b91ac2e536d44b427ef91021a87108c48ed3f2751fdb6 389-ds-base-debugsource-2.8.0-8.el9_8.x86_64.rpm SHA-256: 04b1c6603c7c6817ad9746cee268fa2d725b1d61ea7d77e030423f79975ba7a0 389-ds-base-libs-2.8.0-8.el9_8.x86_64.rpm SHA-256: 9b5852c76c8d03350d4b612a07eb941168781a170c112d69510c2c6eb3af4053 389-ds-base-libs-debuginfo-2.8.0-8.el9_8.x86_64.rpm SHA-256: 7fd3b1c3b3066f02c3ffb10eecc63334bd00977415f6597833ac5bbc232dde87 389-ds-base-snmp-2.8.0-8.el9_8.x86_64.rpm SHA-256: 10277724a399ce62759b423dab4b5c114e1cf25e25d613321cb8798c0184305e 389-ds-base-snmp-debuginfo-2.8.0-8.el9_8.x86_64.rpm SHA-256: c973dcf9c32cf2a70c5d0621479d225c65661fae04c9d123f1b5843e392a0b72 python3-lib389-2.8.0-8.el9_8.noarch.rpm SHA-256: 75a187ffece219f94b45d99baa435164e08d12f5c6ee254152548e931a2145ab Red Hat Enterprise Linux for IBM z Systems 9 SRPM 389-ds-base-2.8.0-8.el9_8.src.rpm SHA-256: 01107570430df26f7140333f297b22190db7c8974947e95e8d6de167740894f0 s390x 389-ds-base-2.8.0-8.el9_8.s390x.rpm SHA-256: 995e66ba21d8233f44d655299e8c12eaff9e0aa4f71659454b1472261e67ff92 389-ds-base-debuginfo-2.8.0-8.el9_8.s390x.rpm SHA-256: 6135becbb3438d4e625f0c3fdc4da8c948b8feb7df82925b7d5fda50af6d9006 389-ds-base-debugsource-2.8.0-8.el9_8.s390x.rpm SHA-256: 48e5e214c01b99bd001a02d4dcbfb02f21f4f6cde2c20e64c1008abddeb2da38 389-ds-base-libs-2.8.0-8.el9_8.s390x.rpm SHA-256: d956faf9958bd21f19900148b92e90b3544d11a6794d14c8d7d6158d5758baa5 389-ds-base-libs-debuginfo-2.8.0-8.el9_8.s390x.rpm SHA-256: dc32732471e8bbc3f073e627d5ab257d6fbbdc58679aead816a6e17704cdb3ba 389-ds-base-snmp-2.8.0-8.el9_8.s390x.rpm SHA-256: 3d6965b466d0dbb789aaaf8ce3bca27011413629ea61050b9de00aefdb97e2ff 389-ds-base-snmp-debuginfo-2.8.0-8.el9_8.s390x.rpm SHA-256: 1cc240b4feb41cce766050e9e01641fa24c3bf25606e134715adae8218470e0c python3-lib389-2.8.0-8.el9_8.noarch.rpm SHA-256: 75a187ffece219f94b45d99baa435164e08d12f5c6ee254152548e931a2145ab Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM 389-ds-base-2.8.0-8.el9_8.src.rpm SHA-256: 01107570430df26f7140333f297b22190db7c8974947e95e8d6de167740894f0 s390x 389-ds-base-2.8.0-8.el9_8.s390x.rpm SHA-256: 995e66ba21d8233f44d655299e8c12eaff9e0aa4f71659454b1472261e67ff92 389-ds-base-debuginfo-2.8.0-8.el9_8.s390x.rpm SHA-256: 6135becbb3438d4e625f0c3fdc4da8c948b8feb7df82925b7d5fda50af6d9006 389-ds-base-debugsource-2.8.0-8.el9_8.s390x.rpm SHA-256: 48e5e214c01b99bd001a02d4dcbfb02f21f4f6cde2c20e64c1008abddeb2da38 389-ds-base-libs-2.8.0-8.el9_8.s390x.rpm SHA-256: d956faf9958bd21f19900148b92e90b3544d11a6794d14c8d7d6158d5758baa5 389-ds-base-libs-debuginfo-2.8.0-8.el9_8.s390x.rpm SHA-256: dc32732471e8bbc3f073e627d5ab257d6fbbdc58679aead816a6e17704cdb3ba 389-ds-base-snmp-2.8.0-8.el9_8.s390x.rpm SHA-256: 3d6965b466d0dbb789aaaf8ce3bca27011413629ea61050b9de00aefdb97e2ff 389-ds-base-snmp-debuginfo-2.8.0-8.el9_8.s390x.rpm SHA-256: 1cc240b4feb41cce766050e9e01641fa24c3bf25606e134715adae8218470e0c python3-lib389-2.8.0-8.el9_8.noarch.rpm SHA-256: 75a187ffece219f94b45d99baa435164e08d12f5c6ee254152548e931a2145ab Red Hat Enterprise Linux for Power, little endian 9 SRPM 389-ds-base-2.8.0-8.el9_8.src.rpm SHA-256: 01107570430df26f7140333f297b22190db7c8974947e95e8d6de167740894f0 ppc64le 389-ds-base-2.8.0-8.el9_8.ppc64le.rpm SHA-256: 0dbc6e1762e306bc3ab22e080baab00ab2d81d9fab06e58f3df44242cef49bb6 389-ds-base-debuginfo-2.8.0-8.el9_8.ppc64le.rpm SHA-256: eef3ad2970a7b0b4a0d1bebd2faa12145c8c6c64b3d2151f33511425293cfbbe 389-ds-base-debugsource-2.8.0-8.el9_8.ppc64le.rpm SHA-256: 83fc02fe38788158a865cdf89343dcaf8f6c358033a04aff6fa1475662c8af56 389-ds-base-libs-2.8.0-8.el9_8.ppc64le.rpm SHA-256: fa3b041d48500aabe623059393d165bd0374283f3362140718e2c5c4507f330d 389-ds-base-libs-debuginfo-2.8.0-8.el9_8.ppc64le.rpm SHA-256: e97b7487736d138cf583a6c19b55054e58acb0b82c2ddbb79143a06d98b9d9b8 389-ds-base-snmp-2.8.0-8.el9_8.ppc64le.rpm SHA-256: 946e3c77641820af7f325acd7c67fc1ec36dbfc7ae6a0c25fc379ece7821b1df 389-ds-base-snmp-debuginfo-2.8.0-8.el9_8.ppc64le.rpm SHA-256: 0bf819bc70b1f205165fe47ea6920098acd9a72d1f804e59a6ab932daa6a45d3 python3-lib389-2.8.0-8.el9_8.noarch.rpm SHA-256: 75a187ffece219f94b45d99baa435164e08d12f5c6ee254152548e931a2145ab Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM 389-ds-base-2.8.0-8.el9_8.src.rpm SHA-256: 01107570430df26f7140333f297b22190db7c8974947e95e8d6de167740894f0 ppc64le 389-ds-base-2.8.0-8.el9_8.ppc64le.rpm SHA-256: 0dbc6e1762e306bc3ab22e080baab00ab2d81d9fab06e58f3df44242cef49bb6 389-ds-base-debuginfo-2.8.0-8.el9_8.ppc64le.rpm SHA-256: eef3ad2970a7b0b4a0d1bebd2faa12145c8c6c64b3d2151f33511425293cfbbe 389-ds-base-debugsource-2.8.0-8.el9_8.ppc64le.rpm SHA-256: 83fc02fe38788158a865cdf89343dcaf8f6c358033a04aff6fa1475662c8af56 389-ds-base-libs-2.8.0-8.el9_8.ppc64le.rpm SHA-256: fa3b041d4850