Red Hat Product Errata RHSA-2026:26461 - Security Advisory Issued: 2026-06-17 Updated: 2026-06-17 RHSA-2026:26461 - Security Advisory Overview Updated Packages Synopsis Important: redhat-ds:11 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.5 E4S for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration. Security Fix(es): 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) (CVE-2026-9064) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Directory Server - 4 years of updates 11 for RHEL 8.6 x86_64 Fixes BZ - 2480093 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) CVEs CVE-2026-9064 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Directory Server - 4 years of updates 11 for RHEL 8.6 SRPM 389-ds-base-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.src.rpm SHA-256: 16d58289f2ad1a4165f191c78212361eca272fe943436d43ab949bfa469be56c x86_64 389-ds-base-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: 98d0deae369b25b774cce70e20770916a65a3987dbced9d99d628fbdd1be7e65 389-ds-base-debuginfo-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: 507ae6f65fc11b250bb4e4cbb99fe861cbf1a760807605fda0d5af0d653ccd66 389-ds-base-debugsource-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: 75fb1f2775a61d334adda1d608089983fe8626c8f21f5e70e56c7326eb065d4a 389-ds-base-devel-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: ec5960bade2dfa10b45f634f0c378d5e69882e1d2f53ddb25a9598599ea060f7 389-ds-base-legacy-tools-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: fbe97bd87b956c35b36f6fa7a7ceb036d64f8e1f92070dfd732517d206276a5e 389-ds-base-legacy-tools-debuginfo-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: c20af620fffd978804c27d188cce88587a248c9c6b193bbf151bb95fbdee193d 389-ds-base-libs-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: 041f3c241310467273fc867cf85bc655888f661383f2765ec60d586ca3b47f55 389-ds-base-libs-debuginfo-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: 141cf2887b5c31a91e48c4255b00f0b5afc9683ccd682eab8deab96ca31050bf 389-ds-base-snmp-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: 860da10dc2a8c880d9104c7ebf1509dea58dd4545e80e95769c97100d53095c1 389-ds-base-snmp-debuginfo-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.x86_64.rpm SHA-256: c05af1ac111fcae360b4b271e6579367a4c382d28e9da3ebc25a83f81356fdca cockpit-389-ds-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.noarch.rpm SHA-256: 1ec7139c3464ac081bccabf6c16964d4ba8311aa0deca47145b21e148b085300 python3-lib389-1.4.3.34-6.module+el8dsrv+24373+7e48d0d8.noarch.rpm SHA-256: 0ecd33a6975a7640efd8007c0da4e6d52293a746fbec38b4879cb13974811fcc The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .