Red Hat Security AdvisoryRHSA-2026:36197
389-ds:1.4 security update
Released 2026-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.src::389-ds:1.4, 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.x86_64::389-ds:1.4 +9
- Red Hat Enterprise Linux AppStream TUS (v.8.8) 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.src::389-ds:1.4, 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.35-19.module+el8.8.0+24470+25f37233.x86_64::389-ds:1.4 +4
Fixes 2 records
Priority MEDIUM 41
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00486 · Published 2026-07-07 · Partial fix · 8060020260702180044.0ca98e7e, 8080020260702180836.f969626e +15 CWE-122
Priority LOW 34
An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00682 · Published 2026-06-11 · Partial fix · 8060020260702180044.0ca98e7e, 8080020260702180836.f969626e +15 CWE-190
