openSUSE 389-ds Important Heap Overflow DoS Fix 2026-3137

Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges ×

This update for 389-ds fixes the following issues:

Update to version 2.2.10~git255.752643c78.

Security issues fixed:

* CVE-2026-11610: missing bounds check in `sasl_io_recv()` can lead to a heap

buffer overflow when processing a specially crafted oversized LDAP UNBIND

packet (bsc#1270695).

* CVE-2026-11611: Content Synchronization persistent plugin allows

unbounded memory growth when an authenticated client stops reading sync

responses(bsc#1267975).

* CVE-2026-11774: integer overflow in `sasl_io_start_packet()` can lead to

heap buffer overflow when processing a crafted SASL packet length prefix

* CVE-2026-11785: type confusion in the SSO token handler can cause partial

stack address information disclosure in LDA responses (bsc#1268065).

* CVE-2026-11786: out-of-bounds read in the LDIF parser when processing

attribute types with trailing semicolons during database import

* CVE-2026-11787: missing...

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3137=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3137=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3137=1

zypper in -t patch SUSE-2026-3137=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3137=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64

* lib389-2.2.10~git255.752643c78-150500.3.48.1

* libsvrcore0-debuginfo-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-debugsource-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-devel-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-debuginfo-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-2.2.10~git255.752643c78-150500.3.48.1

* libsvrcore0-2.2.10~git255.752643c78-150500.3.48.1

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

* 389-ds-snmp-debuginfo-2.2.10~git255.752643c78-150500.3.48.1

* lib389-2.2.10~git255.752643c78-150500.3.48.1

* libsvrcore0-debuginfo-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-devel-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-snmp-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-debugsource-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-debuginfo-2.2.10~git255.752643c78-150500.3.48.1

* 389-ds-2.2.10~git255.752643c78-150500.3.48.1

* libsvrcore0-2.2.10~git255.752643c78-150500.3.48.1

*

*

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.