Read the docs
TI-2026-10023 Aliases CVE-2026-11610GHSA-2g8g-f92j-g4gq

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind

Priority MEDIUM 41CWE-122Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 25 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.

Summary

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF > 0), an authenticated attacker can send a specially crafted oversized LDAP UNBIND packet that is copied into a 512-byte heap receive buffer without a bounds check in sasl_io_recv() in sasl_io.c. This allows up to approximately 2 megabytes of attacker-controlled data to overflow the buffer, causing a denial of service (server crash). In FreeIPA and Red Hat Identity Management deployments, any domain user with a valid Kerberos ticket, any enrolled host, or any service account can trigger this vulnerability over the network after authenticating via GSSAPI. The vulnerable code path has existed since approximately 2013 (389-ds-base 1.3.2) and was not addressed by the CVE-2025-14905 fix, which patched a separate heap overflow in schema.c only.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00486 42nd percentileScored 2026-11-07
Fix Partial Red Hat: 17 advisoriesRed Hat: 25 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
389ds389-ds-base1.3.2 – 3.3.0—No fix listedCNA
Red HatRed Hat Directory Server 11.5 E4S for RHEL 8—8060020260702180044.0ca98e7ePatch availableCNA
Red HatRed Hat Directory Server 11.7 E4S for RHEL 8—8080020260702180836.f969626ePatch availableCNA
Red HatRed Hat Directory Server 11.9 for RHEL 8—8100020260702145313.37ed7c03Patch availableCNA
Red HatRed Hat Directory Server 12.2 E4S for RHEL 9—9020020260703060155.1674d574Patch availableCNA
Red HatRed Hat Directory Server 12.4 E4S for RHEL 9—9040020260703055735.1674d574Patch availableCNA
Red HatRed Hat Enterprise Linux 10—3.2.0-8.el10_2Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—3.0.6-19.el10_0Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—1.3.11.1-13.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8100020260626120929.25e700aaPatch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—8040020260629123121.96015a92Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—8040020260629123121.96015a92Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—8060020260626130540.824efc52Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—8060020260626130540.824efc52Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—8080020260630025241.6dbb3803Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—8080020260630025241.6dbb3803Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2.8.0-8.el9_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—2.2.4-19.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—2.4.5-26.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—2.6.1-22.el9_6Patch availableCNA
Red HatRed Hat Directory Server 13.2—1783452100Patch availableCNA
Red HatRed Hat Directory Server 12——No fix listedCNA
Red HatRed Hat Directory Server 13——Not affectedCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • 389-ds-base Vendor389ds Affected 1.3.2 – 3.3.0 Fixed in — No fix listed CNA
  • Red Hat Directory Server 11.5 E4S for RHEL 8 VendorRed Hat Affected — Fixed in 8060020260702180044.0ca98e7e Patch available CNA
  • Red Hat Directory Server 11.7 E4S for RHEL 8 VendorRed Hat Affected — Fixed in 8080020260702180836.f969626e Patch available CNA
  • Red Hat Directory Server 11.9 for RHEL 8 VendorRed Hat Affected — Fixed in 8100020260702145313.37ed7c03 Patch available CNA
  • Red Hat Directory Server 12.2 E4S for RHEL 9 VendorRed Hat Affected — Fixed in 9020020260703060155.1674d574 Patch available CNA
  • Red Hat Directory Server 12.4 E4S for RHEL 9 VendorRed Hat Affected — Fixed in 9040020260703055735.1674d574 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.2.0-8.el10_2 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 3.0.6-19.el10_0 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.3.11.1-13.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8100020260626120929.25e700aa Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8040020260629123121.96015a92 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 8040020260629123121.96015a92 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8060020260626130540.824efc52 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 8060020260626130540.824efc52 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8080020260630025241.6dbb3803 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8080020260630025241.6dbb3803 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.8.0-8.el9_8 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.2.4-19.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.4.5-26.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.6.1-22.el9_6 Patch available CNA
  • Red Hat Directory Server 13.2 VendorRed Hat Affected — Fixed in 1783452100 Patch available CNA
  • Red Hat Directory Server 12 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Directory Server 13 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 25

CPEVersionsRoleVendor
cpe:/a:redhat:directory_server_e4s:11.5::el811.5—Red Hat
cpe:/a:redhat:directory_server_e4s:11.7::el811.7—Red Hat
cpe:/a:redhat:directory_server:11.9::el811.9—Red Hat
cpe:/a:redhat:directory_server_e4s:12.2::el912.2—Red Hat
cpe:/a:redhat:directory_server_e4s:12.4::el912.4—Red Hat
cpe:/o:redhat:enterprise_linux:10.210.2—Red Hat
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
  • cpe:/a:redhat:directory_server_e4s:11.5::el8 Versions 11.5 — ·Red Hat
  • cpe:/a:redhat:directory_server_e4s:11.7::el8 Versions 11.7 — ·Red Hat
  • cpe:/a:redhat:directory_server:11.9::el8 Versions 11.9 — ·Red Hat
  • cpe:/a:redhat:directory_server_e4s:12.2::el9 Versions 12.2 — ·Red Hat
  • cpe:/a:redhat:directory_server_e4s:12.4::el9 Versions 12.4 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
Show 15 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::crb9—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/a:redhat:rhel_eus:9.6::crb9.6—Red Hat
cpe:/a:redhat:directory_server:13.2::el1013.2—Red Hat
cpe:/a:redhat:directory_server:1212—Red Hat
cpe:/a:redhat:directory_server:1313—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::crb Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:directory_server:13.2::el10 Versions 13.2 — ·Red Hat
  • cpe:/a:redhat:directory_server:12 Versions 12 — ·Red Hat
  • cpe:/a:redhat:directory_server:13 Versions 13 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat

Remediation

Red Hat 17 advisories

  • RHSA-2026:36671 Released 2026-07-08 · Red Hat rating Important
    389-ds-base security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) 389-ds-base-devel-2.6.1-22.el9_6
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) 389-ds-base-2.6.1-22.el9_6, 389-ds-base-libs-2.6.1-22.el9_6, 389-ds-base-snmp-2.6.1-22.el9_6 +1
  • RHSA-2026:36670 Released 2026-07-08 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) 389-ds-base-3.0.6-19.el10_0, 389-ds-base-libs-3.0.6-19.el10_0, 389-ds-base-snmp-3.0.6-19.el10_0 +1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) 389-ds-base-bdb-3.0.6-19.el10_0, 389-ds-base-devel-3.0.6-19.el10_0
  • RHSA-2026:36660 Released 2026-07-08 · Red Hat rating Important
    Red Hat Directory Server 13.2 container image update
    • Red Hat Directory Server 13.2 registry.redhat.io/dirsrv/dirsrv-container-rhel10
Show 14 more Red Hat advisories
  • RHSA-2026:36641 Released 2026-07-08 · Red Hat rating Important
    redhat-ds:12 security update
    • Red Hat Directory Server 12.2 E4S for RHEL 9 389-ds-base-2.2.7-16.module+el9dsrv+24460+990bd826.src::redhat-ds:12, 389-ds-base-2.2.7-16.module+el9dsrv+24460+990bd826.x86_64::redhat-ds:12, 389-ds-base-devel-2.2.7-16.module+el9dsrv+24460+990bd826.x86_64::redhat-ds:12 +4
  • RHSA-2026:36585 Released 2026-07-08 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) 389-ds-base-2.2.4-19.el9_2, 389-ds-base-libs-2.2.4-19.el9_2, python3-lib389-2.2.4-19.el9_2
  • RHSA-2026:36201 Released 2026-07-07 · Red Hat rating Important
    389-ds:1.4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) 389-ds-base-1.4.3.39-25.module+el8.10.0+24462+1b66c107.aarch64::389-ds:1.4, 389-ds-base-1.4.3.39-25.module+el8.10.0+24462+1b66c107.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.39-25.module+el8.10.0+24462+1b66c107.s390x::389-ds:1.4 +19
  • RHSA-2026:36202 Released 2026-07-07 · Red Hat rating Important
    389-ds:1.4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.src::389-ds:1.4, 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64::389-ds:1.4 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.src::389-ds:1.4, 389-ds-base-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.x86_64::389-ds:1.4 +4
  • RHSA-2026:36205 Released 2026-07-07 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) 389-ds-base-1.3.11.1-13.el7_9, 389-ds-base-libs-1.3.11.1-13.el7_9
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) 389-ds-base-1.3.11.1-13.el7_9, 389-ds-base-devel-1.3.11.1-13.el7_9, 389-ds-base-libs-1.3.11.1-13.el7_9 +1
  • RHSA-2026:36196 Released 2026-07-07 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream (v. 10) 389-ds-base-3.2.0-8.el10_2, 389-ds-base-libs-3.2.0-8.el10_2, 389-ds-base-snmp-3.2.0-8.el10_2 +1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) 389-ds-base-bdb-3.2.0-8.el10_2, 389-ds-base-devel-3.2.0-8.el10_2
  • RHSA-2026:36195 Released 2026-07-07 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream (v. 9) 389-ds-base-2.8.0-8.el9_8, 389-ds-base-libs-2.8.0-8.el9_8, 389-ds-base-snmp-2.8.0-8.el9_8 +1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) 389-ds-base-devel-2.8.0-8.el9_8
  • RHSA-2026:36206 Released 2026-07-07 · Red Hat rating Important
    389-ds:1.4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) 389-ds-base-1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.src::389-ds:1.4, 389-ds-base-1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.x86_64::389-ds:1.4 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) 389-ds-base-1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.src::389-ds:1.4, 389-ds-base-1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.x86_64::389-ds:1.4 +4
  • RHSA-2026:36208 Released 2026-07-07 · Red Hat rating Important
    redhat-ds:11 security update
    • Red Hat Directory Server 11.7 E4S for RHEL 8 389-ds-base-1.4.3.34-16.module+el8dsrv+24461+e76d504b.src::redhat-ds:11, 389-ds-base-1.4.3.34-16.module+el8dsrv+24461+e76d504b.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.34-16.module+el8dsrv+24461+e76d504b.x86_64::redhat-ds:11 +5
  • RHSA-2026:36209 Released 2026-07-07 · Red Hat rating Important
    redhat-ds:12 security update
    • Red Hat Directory Server 12.4 E4S for RHEL 9 389-ds-base-2.4.5-24.module+el9dsrv+24459+87716c2d.src::redhat-ds:12, 389-ds-base-2.4.5-24.module+el9dsrv+24459+87716c2d.x86_64::redhat-ds:12, 389-ds-base-devel-2.4.5-24.module+el9dsrv+24459+87716c2d.x86_64::redhat-ds:12 +4
  • RHSA-2026:36198 Released 2026-07-07 · Red Hat rating Important
    389-ds-base security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) 389-ds-base-2.4.5-26.el9_4, 389-ds-base-libs-2.4.5-26.el9_4, python3-lib389-2.4.5-26.el9_4
  • RHSA-2026:36204 Released 2026-07-07 · Red Hat rating Important
    redhat-ds:11 security update
    • Red Hat Directory Server 11.5 E4S for RHEL 8 389-ds-base-1.4.3.34-7.module+el8dsrv+24471+245dd8e2.src::redhat-ds:11, 389-ds-base-1.4.3.34-7.module+el8dsrv+24471+245dd8e2.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.34-7.module+el8dsrv+24471+245dd8e2.x86_64::redhat-ds:11 +5
  • RHSA-2026:36197 Released 2026-07-07 · Red Hat rating Important
    389-ds:1.4 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.ppc64le::389-ds:1.4, 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.src::389-ds:1.4, 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.x86_64::389-ds:1.4 +9
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.src::389-ds:1.4, 389-ds-base-1.4.3.35-19.module+el8.8.0+24470+25f37233.x86_64::389-ds:1.4, 389-ds-base-devel-1.4.3.35-19.module+el8.8.0+24470+25f37233.x86_64::389-ds:1.4 +4
  • RHSA-2026:36200 Released 2026-07-07 · Red Hat rating Important
    redhat-ds:11 security update
    • Red Hat Directory Server 11.9 for RHEL 8 389-ds-base-1.4.3.39-25.module+el8dsrv+24463+e272972e.src::redhat-ds:11, 389-ds-base-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64::redhat-ds:11, 389-ds-base-devel-1.4.3.39-25.module+el8dsrv+24463+e272972e.x86_64::redhat-ds:11 +5

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Directory Server 12AffectedNo fix yet
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:36671
Red Hat Directory Server 11.5 E4S for RHEL 8Fixed RHSA-2026:36204
Red Hat Directory Server 11.7 E4S for RHEL 8Fixed RHSA-2026:36208
Red Hat Directory Server 11.9 for RHEL 8Fixed RHSA-2026:36200
Red Hat Directory Server 12.2 E4S for RHEL 9Fixed RHSA-2026:36641
Red Hat Directory Server 12.4 E4S for RHEL 9Fixed RHSA-2026:36209
Red Hat Directory Server 13.2Fixed RHSA-2026:36660
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:36196
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:36201
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:36195
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:36206
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:36202
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:36197
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:36585
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:36198
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:36670
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:36671
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:36206
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:36202
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:36197
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:36196
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:36195
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:36670
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:36205
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:36205
Not affected: 1 product
  • Red Hat Directory Server 13

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-11610
  2. 2026-10-03 Alias added: GHSA-2g8g-f92j-g4gq

References

Advisory 17

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences