Red Hat Security Advisory

RHSA-2026:36660

Red Hat Directory Server 13.2 container image update

Released 2026-07-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Directory Server 13.2 registry.redhat.io/dirsrv/dirsrv-container-rhel10

Fixes 2 records

TI-2026-10023 CVE-2026-11610 · GHSA-2g8g-f92j-g4gq

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

MEDIUM 41

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00486 Published 2026-07-07 Partial fix · 8060020260702180044.0ca98e7e, 8080020260702180836.f969626e +15 CWE-122

TI-2026-10161 CVE-2026-11774 · GHSA-6mrg-rm5v-2c3q

389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow

LOW 34

An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base).

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00682 Published 2026-06-11 Partial fix · 8060020260702180044.0ca98e7e, 8080020260702180836.f969626e +15 CWE-190