Red Hat Product Errata RHSA-2026:36200 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36200 - Security Advisory Overview Updated Packages Synopsis Important: redhat-ds:11 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration. Additional Changes: For detailed information on changes in this release, see the Red Hat Directory Server 11.9 for RHEL 8 Release Notes linked from the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Directory Server 11.9 x86_64 Fixes BZ - 2484414 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND BZ - 2484916 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow CVEs CVE-2026-11610 CVE-2026-11774 References https://access.redhat.com/security/updates/classification/#important https://docs.redhat.com/en/documentation/red_hat_directory_server/11/html/release_notes/index Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Directory Server 11.9 SRPM 389-ds-base-1.4.3.39-25.module+el8dsrv+24463+e272972e.src.rpm SHA-256: 0ccd4b2c8adce6d6f0a0f3d34bfe5c16d34adb410198dea5f942207fa1d2b85b x86_64 389-ds-base-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 362b968423cfceb8d409807c2d33c3984ac7d8db4a56ba2df3f27a315e7c7c11 389-ds-base-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: cfaaa677b995a29e901acdd0c022850c1f60fe99b6721f5237cea98a74177557 389-ds-base-debugsource-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 67b01e5fc1df15e6cd7e8cc8ef23e980969b2460d7acbfb32cfd0f40c80909fa 389-ds-base-devel-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 667e86431ff0f73948afde79e144355a2964584744a966083d97288eb120e751 389-ds-base-legacy-tools-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 378d0649b10891311b05f4f0d03ef1d97981cfb5fd1eb74ebf1e53d8b61e1f1b 389-ds-base-legacy-tools-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 0b07179b67f8f082fc565df23bfdc0f55dc0c088eab77544f192fe67223b726b 389-ds-base-libs-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: e0de7a292b1bf3c4a5922982cac7bd149b1b928d959069dc323dab05a308c1cd 389-ds-base-libs-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 8da6aef3a16ecc93d1e5d2d3dc4fb4a6809bee09173448a056f046c32554491c 389-ds-base-snmp-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 93403caa4b59027dc790c55338be2f3e815eedacf2d50a49678f9d6e9b7a1e72 389-ds-base-snmp-debuginfo-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64.rpm SHA-256: 1dcbb0c91fbd71229faf8420fc941bf65dd20925cbe4e374d5beb2821eaa0168 cockpit-389-ds-1.4.3.39-25.module+el8dsrv+24463+e272972e.noarch.rpm SHA-256: 4edc62971ad2fc6b90e3234c231124cadfe24b3692a892d33ddc547fb6044830 python3-lib389-1.4.3.39-25.module+el8dsrv+24463+e272972e.noarch.rpm SHA-256: 4e7ba062345ba986b70c5ba62c629061c98767c2333483d08ed3a37e43afbb52 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .