Red Hat Product Errata RHSA-2026:36670 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36670 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds-base security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2484414 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND BZ - 2484916 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow CVEs CVE-2026-11610 CVE-2026-11774 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-19.el10_0.src.rpm SHA-256: 077b91123a64289e21769ab7c443ff297107bd09f6fd0a7f45c41d8ae6ff0858 x86_64 389-ds-base-3.0.6-19.el10_0.x86_64.rpm SHA-256: 0fff9628138da675097186302b8d9db8a34e48f4f73fdf1498f1af4461c2de05 389-ds-base-bdb-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: 93e4b16063b674167b415484daf7e246f99b995d33545a3f35501c6e96527186 389-ds-base-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: 38a1c0a0e3b08bb579dfbd09aaa47a40200629f3b02f2b3754b4a8862479e37e 389-ds-base-debugsource-3.0.6-19.el10_0.x86_64.rpm SHA-256: fb8429e0a97260c5c8224342df9d556624ba89f3be01ec56213e9896d70807f8 389-ds-base-libs-3.0.6-19.el10_0.x86_64.rpm SHA-256: d88cb0a32763e0406465683c87de0fdcc6c9c8cc2f48a4eb1d6b75ba0fed3766 389-ds-base-libs-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: cdfe7731583ada4923202064fb4ddfa4d0c023c96485505130ae87e47aae1bd9 389-ds-base-snmp-3.0.6-19.el10_0.x86_64.rpm SHA-256: 6db16cab7e9b1aeccef430ea7725c0dfe5c5596fb35b8e795e3ad990e0bad3ea 389-ds-base-snmp-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: f6f80abc1a74d7932e0350e7fb5c4ab5ad0e707d25052bc9207a3a0c689893ae python3-lib389-3.0.6-19.el10_0.noarch.rpm SHA-256: 91dee18139d5bf2e5dd8f8b51ba1f7d5e7edfb5908bdceb7d8cd02ecabcb7f6a Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-19.el10_0.src.rpm SHA-256: 077b91123a64289e21769ab7c443ff297107bd09f6fd0a7f45c41d8ae6ff0858 s390x 389-ds-base-3.0.6-19.el10_0.s390x.rpm SHA-256: 8c582bb082bc9d32d58e55a57e0cc8f429d459a68c9c34e83b37c6abe0f3820c 389-ds-base-bdb-debuginfo-3.0.6-19.el10_0.s390x.rpm SHA-256: 42e1da68288d724972fb02903491edcb1cb6d2fb386f36f49e9c4f917e5afe33 389-ds-base-debuginfo-3.0.6-19.el10_0.s390x.rpm SHA-256: 38e8d11743814cf9b926487e32ba8a7cba4e2f43dbc392cc496cbee5ec579576 389-ds-base-debugsource-3.0.6-19.el10_0.s390x.rpm SHA-256: b5733cde56ddf64175d8587d7990c8db6d25e43773f655365440a2c085dbc3ac 389-ds-base-libs-3.0.6-19.el10_0.s390x.rpm SHA-256: 368f240d67314855a60c9997bd1ec074bdb9672fbf7fd134909f60d2fd66647c 389-ds-base-libs-debuginfo-3.0.6-19.el10_0.s390x.rpm SHA-256: a652793d3e28cb150ba7e9c3716b2c2468eb0f156408b468102ee3ff07b5979a 389-ds-base-snmp-3.0.6-19.el10_0.s390x.rpm SHA-256: c9d6efe0209975e046e58d773e59b68a0f58d47d3373a689c155ac0d79971273 389-ds-base-snmp-debuginfo-3.0.6-19.el10_0.s390x.rpm SHA-256: d09857a1a56d1bb332e384b84033841d1c8905ee1d15fe3313c95b478a28de90 python3-lib389-3.0.6-19.el10_0.noarch.rpm SHA-256: 91dee18139d5bf2e5dd8f8b51ba1f7d5e7edfb5908bdceb7d8cd02ecabcb7f6a Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-19.el10_0.src.rpm SHA-256: 077b91123a64289e21769ab7c443ff297107bd09f6fd0a7f45c41d8ae6ff0858 ppc64le 389-ds-base-3.0.6-19.el10_0.ppc64le.rpm SHA-256: d2c7faa9b08d00260656d6c13e9b04720c0afbaae6e5a092f6ea511ea4c9e20e 389-ds-base-bdb-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 0adbf0a8f7c7b6031e9bcfb2a82321b6d85a6b0636f5dabfacb9e1fc9f6c8e74 389-ds-base-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: b438e73124016b2c840fd9f92bfd83a36185a46286c2f87f81ea250752b30343 389-ds-base-debugsource-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 187a8d9a237ce751aafaef6fd813ce73c8c2474eece8c32a8ee4323ef4bbc616 389-ds-base-libs-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 05e32755092c416a703a3ab8e15c276ac02b0aa60dd835010fcf016af3e7bc16 389-ds-base-libs-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 26ff6f80651ca53f061d7254be287489c570e017ce804bee77c435f77e1c0c00 389-ds-base-snmp-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 45e29946a47e400d232f2bef0166eeb267ca2e2b01691b33279a5de7d54bb8c3 389-ds-base-snmp-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 4b873f5d5a7dcd8cc8e66922338dc8b9458f51a00746cfb6dd4dea58e4c5ab0f python3-lib389-3.0.6-19.el10_0.noarch.rpm SHA-256: 91dee18139d5bf2e5dd8f8b51ba1f7d5e7edfb5908bdceb7d8cd02ecabcb7f6a Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM 389-ds-base-3.0.6-19.el10_0.src.rpm SHA-256: 077b91123a64289e21769ab7c443ff297107bd09f6fd0a7f45c41d8ae6ff0858 aarch64 389-ds-base-3.0.6-19.el10_0.aarch64.rpm SHA-256: 7530dabce1e8dc499347eb3153da9725ba796fc101258199524191e2b4cb550f 389-ds-base-bdb-debuginfo-3.0.6-19.el10_0.aarch64.rpm SHA-256: 1ca2ecd0874dcc70a5f209f2f242304a4062300dbc78db63c5ce2e94d767d1b8 389-ds-base-debuginfo-3.0.6-19.el10_0.aarch64.rpm SHA-256: fa6e63e0d5e016a46de8e8c447808ef8325e278310cab77289071bb426b0b344 389-ds-base-debugsource-3.0.6-19.el10_0.aarch64.rpm SHA-256: 5fd5fd7e70458079268508d6ab1e10a97bbe777d4a820f3441f57fb0eab3bf50 389-ds-base-libs-3.0.6-19.el10_0.aarch64.rpm SHA-256: 8a667fe1ed79d4f6f97d632e47984f756b1114adcdbb00bf62804d397fb41108 389-ds-base-libs-debuginfo-3.0.6-19.el10_0.aarch64.rpm SHA-256: fbb58a470e151bd227c05d9c2a5c2e61504065cb20856ba1d74f9f5a08674f0e 389-ds-base-snmp-3.0.6-19.el10_0.aarch64.rpm SHA-256: 77f49075ab8aa2f560834c6f78d0d39344c73068d40628573f1ddf8117b7cd55 389-ds-base-snmp-debuginfo-3.0.6-19.el10_0.aarch64.rpm SHA-256: 9dbac06ac4c411320a09c57bbc927b5b2a79a8a22b11237602f17f15dcf51174 python3-lib389-3.0.6-19.el10_0.noarch.rpm SHA-256: 91dee18139d5bf2e5dd8f8b51ba1f7d5e7edfb5908bdceb7d8cd02ecabcb7f6a Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 389-ds-base-bdb-3.0.6-19.el10_0.x86_64.rpm SHA-256: aa1d4c3553f9aef42fc3e24c52ca8c57d3ec76cfc9795da9b3c9e32452459943 389-ds-base-bdb-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: 93e4b16063b674167b415484daf7e246f99b995d33545a3f35501c6e96527186 389-ds-base-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: 38a1c0a0e3b08bb579dfbd09aaa47a40200629f3b02f2b3754b4a8862479e37e 389-ds-base-debugsource-3.0.6-19.el10_0.x86_64.rpm SHA-256: fb8429e0a97260c5c8224342df9d556624ba89f3be01ec56213e9896d70807f8 389-ds-base-devel-3.0.6-19.el10_0.x86_64.rpm SHA-256: 14288e7025768e947cab25a595f5b5e0291baee55514f467b2e63b77c7e4daef 389-ds-base-libs-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: cdfe7731583ada4923202064fb4ddfa4d0c023c96485505130ae87e47aae1bd9 389-ds-base-snmp-debuginfo-3.0.6-19.el10_0.x86_64.rpm SHA-256: f6f80abc1a74d7932e0350e7fb5c4ab5ad0e707d25052bc9207a3a0c689893ae Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le 389-ds-base-bdb-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 452cee8a75c6e220c47ae37ad6c5a2fe6335ca7e0865cc2bcf1e7f25e936e64b 389-ds-base-bdb-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 0adbf0a8f7c7b6031e9bcfb2a82321b6d85a6b0636f5dabfacb9e1fc9f6c8e74 389-ds-base-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: b438e73124016b2c840fd9f92bfd83a36185a46286c2f87f81ea250752b30343 389-ds-base-debugsource-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 187a8d9a237ce751aafaef6fd813ce73c8c2474eece8c32a8ee4323ef4bbc616 389-ds-base-devel-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 8803b88ad515d7065aaaff9d87c132072441dfd9ec855fcc4781bc45e82eaef0 389-ds-base-libs-debuginfo-3.0.6-19.el10_0.ppc64le.rpm SHA-256: 26ff6f80651ca53f061d7254be287489c570e017ce804bee77c435f77e1c0c00 3