Back Linuxsecurity

openSUSE 389-ds Important Heap Overflow Fix CVE-2025-14905 2026-1753

Linuxsecurity •LinuxSecurity Advisories • May 7, 2026

This update for 389-ds fixes the following issues: Update to version 2.0.20~git89.937b1f291. Security issues fixed: * CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727). Other updates and bugfixes: * Issue 7224 - CI Test - Simplify `test_reserve_descriptor_validation` (#7225). * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits. * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180). * Issue 7172 - Index ordering mismatch after upgrade (#7173). * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145). * Issue 7091 - Duplicate local password policy entries listed (#7092). * Issue 7124 - BDB cursor race condition with transaction isolation (#7125). * Issue 7121 - LeakSanitizer: various leaks during replication (#7122). * Issue 7115 - LeakSanitizer: leak in

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1753=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1753=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1753=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1753=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1753=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-1753=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1753=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1753=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1753=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1753=1

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * 389-ds-devel-2.0.20~git89.937b1f291-150400.3.48.1 * libsvrcore0-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-snmp-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-debugsource-2.0.20~git89.937b1f291-150400.3.48.1 * lib389-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1 * libsvrcore0-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-snmp-2.0.20~git89.937b1f291-150400.3.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * 389-ds-devel-2.0.20~git89.937b1f291-150400.3.48.1 * libsvrcore0-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-debugsource-2.0.20~git89.937b1f291-150400.3.48.1 * lib389-2.0.20~git89.937b1f291-150400.3.48.1 * 389-ds-2.0.20~git89.937b1f291-150400.3.48.1 * Read the Full Advisory

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

* 389-ds-devel-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-snmp-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debugsource-2.0.20~git89.937b1f291-150400.3.48.1

* lib389-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-snmp-2.0.20~git89.937b1f291-150400.3.48.1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64

* 389-ds-devel-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debugsource-2.0.20~git89.937b1f291-150400.3.48.1

* lib389-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-2.0.20~git89.937b1f291-150400.3.48.1

* bsc#1258727 ## References: * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Heap Overflow Vulnerability in 389-ds Affects SUSE and openSUSE Systems A critical heap buffer overflow vulnerability, CVE-2025-14905, was identified in the 389-ds directory server, impacting multiple SUSE and openSUSE systems. This flaw arises from improper size calculations in the `schema_attr_enum_callback` function, potentially allowing attackers to exploit the vulnerability. The CVSS score for this vulnerability is 8.6, indicating a high severity level. Affected systems include openSUSE Leap 15.4 and various SUSE Linux Enterprise products. Users are advised to apply the latest patches to mitigate risks. The vulnerability was published on February 23, 2026, and has been addressed in version 2.0.20~git89.937b1f291. Additional bug fixes and updates were also included in the release. The patching process can be conducted using standard SUSE installation methods. 2 sources 74

Extracted Entities

openSUSE 389-ds Important Heap Overflow Fix CVE-2025-14905 2026-1753

The full story

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (4)