{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-11610: fix heap buffer overflow in sasl_io_recv via oversized unencrypted UNBIND\n- CVE-2026-11774: fix integer overflow in sasl_io_start_packet packet length handling", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1783596522", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1783596522" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.6esu/advisories/2026/clsa-2026_1783596522.json" } ], "tracking": { "current_release_date": "2026-07-09T11:29:40Z", "generator": { "date": "2026-07-09T11:29:40Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1783596522", "initial_release_date": "2026-07-09T11:29:40Z", "revision_history": [ { "date": "2026-07-09T11:29:40Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "389-ds-base: Fix of 2 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.6", "product": { "name": "AlmaLinux 9.6", "product_id": "AlmaLinux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.6", "product": { "name": "Rocky Linux 9.6", "product_id": "Rocky Linux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-libs@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-snmp@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_id": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/389-ds-base-devel@2.6.1-12.el9_6.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els3?arch=noarch" } } }, { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els2?arch=noarch" } } }, { "category": "product_version", "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "product": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "product_id": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-lib389@2.6.1-12.el9_6.tuxcare.els1?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch" }, "product_reference": "python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64" }, "product_reference": "389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-11610", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server\n(389-ds-base). After a successful SASL bind with integrity protection (SSF > 0),\nan authenticated attacker can send a specially crafted oversized LDAP UNBIND packet\nthat is copied into a 512-byte heap receive buffer without a bounds check in\nsasl_io_recv() in sasl_io.c. This allows up to approximately 2 megabytes of\nattacker-controlled data to overflow the buffer, causing a denial of service (server\ncrash). In FreeIPA and Red Hat Identity Management deployments, any domain user with\na valid Kerberos ticket, any enrolled host, or any service account can trigger this\nvulnerability over the network after authenticating via GSSAPI.\nThe vulnerable code path has existed since approximately 2013 (389-ds-base 1.3.2) and\nwas not addressed by the CVE-2025-14905 fix, which patched a separate heap overflow\nin schema.c only.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" ], "known_affected": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-11610" } ], "release_date": "2026-07-07T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-09T11:28:45.855779Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1783596522", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1783596522" }, { "category": "none_available", "date": "2026-07-07T10:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-11774", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-maxsasliosize limit and leading to a heap buffer overflow of up to approximately 2 megabytes of attacker-controlled data. After a successful SASL bind with integrity protection (SSF > 0), a remote attacker can cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE). In FreeIPA and Red Hat Identity Management deployments, any domain user with a valid Kerberos ticket, enrolled host, or service account can trigger this vulnerability over the network. This flaw is independent of CVE-2025-14905, which patched schema.c only and did not modify sasl_io.c.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" ], "known_affected": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-11774" } ], "release_date": "2026-06-11T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-07-09T11:28:45.855779Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1783596522", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1783596522" }, { "category": "none_available", "date": "2026-06-11T19:16:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els1.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els2.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els1.noarch", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els2.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "AlmaLinux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch", "Rocky Linux-9.6:389-ds-base-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-devel-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-libs-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:389-ds-base-snmp-0:2.6.1-12.el9_6.tuxcare.els3.x86_64", "Rocky Linux-9.6:python3-lib389-0:2.6.1-12.el9_6.tuxcare.els3.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }