Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

openSUSE 389-ds Important Heap Overflow Fix CVE-2025-14905 2026-1753-1

opensuse
Calendar Grey May 7, 2026
Scroller Opensuse
Security update for 389-ds addresses a critical heap overflow issue impacting multiple openSUSE distributions.
An update that solves one vulnerability can now be installed.

Description

This update for 389-ds fixes the following issues:

Update to version 2.0.20~git89.937b1f291.

Security issues fixed:

* CVE-2025-14905: heap buffer overflow due to improper size calculation in

`schema_attr_enum_callback` callback (bsc#1258727).

Other updates and bugfixes:

* Issue 7224 - CI Test - Simplify `test_reserve_descriptor_validation`

(#7225).

* Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan

limits.

* Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180).

* Issue 7172 - Index ordering mismatch after upgrade (#7173).

* Issue 7096 - During replication online total init the function

idl_id_is_in_idlist is not scaling with large database (#7145).

* Issue 7091 - Duplicate local password policy entries listed (#7092).

* Issue 7124 - BDB cursor race condition with transaction isolation (#7125).

* Issue 7121 - LeakSanitizer: various leaks during replication (#7122).

* Issue 7115 - LeakSanitizer: leak in...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory threat important heap overflow OpenSUSE 389-ds

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2026-1753=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1753=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1753=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1753=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1753=1

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

* 389-ds-devel-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-snmp-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debugsource-2.0.20~git89.937b1f291-150400.3.48.1

* lib389-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-snmp-2.0.20~git89.937b1f291-150400.3.48.1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64

x86_64)

* 389-ds-devel-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debugsource-2.0.20~git89.937b1f291-150400.3.48.1

* lib389-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-2.0.20~git89.937b1f291-150400.3.48.1

* 389-ds-debuginfo-2.0.20~git89.937b1f291-150400.3.48.1

* libsvrcore0-2.0.20~git89.937b1f291-150400.3.48.1

* SUSE Linux Enterprise High...

Read the Full Advisory

References

* bsc#1258727

## References:

* https://www.suse.com/security/cve/CVE-2025-14905.html

* https://bugzilla.suse.com/show_bug.cgi?id=1258727

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:1753-1
Release Date: 2026-05-07T13:54:19Z
Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4

Topics%20covered

Topics Covered

security advisory threat important heap overflow OpenSUSE 389-ds

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.