Red Hat Product Errata RHSA-2026:36202 - Security Advisory Issued: 2026-07-07 Updated: 2026-07-07 RHSA-2026:36202 - Security Advisory Overview Updated Packages Synopsis Important: 389-ds:1.4 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es): 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND (CVE-2026-11610) 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (CVE-2026-11774) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2484414 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND BZ - 2484916 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow CVEs CVE-2026-11610 CVE-2026-11774 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.src.rpm SHA-256: f43b4011fc0c82f15bded32d4fdde4f30df4862d10b70acdf570b8820d9da0ec x86_64 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: c193a613a872420765fe1fc9e93024457e0e6f89fd5653db034462da83ab3f11 389-ds-base-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: a98693b8dd66e57f4454da9f091ed44947faac871c15df3448f69b3353657105 389-ds-base-debugsource-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 8fc7a7a9383a3d01907f2c8c16d5534a78f17c8b8542692bcfdc78538fbdcfa3 389-ds-base-devel-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 9014b33e4aab6281d886ed26590052a89c63dceb215d7733e8b61abbf6eb0bd6 389-ds-base-legacy-tools-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 4081ca668b78918e2c993ddfda9330503a30321bc13f9ce6ecec6ba8a5ba68d7 389-ds-base-legacy-tools-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 7b036edeba8af049aba0a8f9936b8c3482ffd2002d1868b030a7a3f441c32a25 389-ds-base-libs-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 521f292991a58c60f4b33156401a3ba9b08ec2469aa77b8513886f887f946323 389-ds-base-libs-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: e354a1fe2c5af189e152a9806b181180c7db93f6216859a37e1424c2e86dff18 389-ds-base-snmp-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: b31471980669a5329fcc1d3f25ac1a46c2cb6e5d75e934c6cc57e0634f3073f3 389-ds-base-snmp-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 70c767cf1d57e0d8ada11f13dcb560723d3bfb224658a140d144ded53228e9e6 python3-lib389-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.noarch.rpm SHA-256: 0f6bf9e93d85536fc9ee265cdb3d7baf5d2e1e89b3ff85c3f7e3530186db9153 Red Hat Enterprise Linux Server - AUS 8.6 SRPM 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.src.rpm SHA-256: f43b4011fc0c82f15bded32d4fdde4f30df4862d10b70acdf570b8820d9da0ec x86_64 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: c193a613a872420765fe1fc9e93024457e0e6f89fd5653db034462da83ab3f11 389-ds-base-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: a98693b8dd66e57f4454da9f091ed44947faac871c15df3448f69b3353657105 389-ds-base-debugsource-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 8fc7a7a9383a3d01907f2c8c16d5534a78f17c8b8542692bcfdc78538fbdcfa3 389-ds-base-devel-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 9014b33e4aab6281d886ed26590052a89c63dceb215d7733e8b61abbf6eb0bd6 389-ds-base-legacy-tools-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 4081ca668b78918e2c993ddfda9330503a30321bc13f9ce6ecec6ba8a5ba68d7 389-ds-base-legacy-tools-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 7b036edeba8af049aba0a8f9936b8c3482ffd2002d1868b030a7a3f441c32a25 389-ds-base-libs-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 521f292991a58c60f4b33156401a3ba9b08ec2469aa77b8513886f887f946323 389-ds-base-libs-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: e354a1fe2c5af189e152a9806b181180c7db93f6216859a37e1424c2e86dff18 389-ds-base-snmp-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: b31471980669a5329fcc1d3f25ac1a46c2cb6e5d75e934c6cc57e0634f3073f3 389-ds-base-snmp-debuginfo-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64.rpm SHA-256: 70c767cf1d57e0d8ada11f13dcb560723d3bfb224658a140d144ded53228e9e6 python3-lib389-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.noarch.rpm SHA-256: 0f6bf9e93d85536fc9ee265cdb3d7baf5d2e1e89b3ff85c3f7e3530186db9153 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .