# CVE-2025-14905: 389-ds: This update for 389-ds fixes the following issues:  Update to LTS branch 2.7 (jsc#PED-14342):  - CVE-2025-14905: Fixe...

CVE-2025-14905 is fixed in 8 products on 1 platform, first by DEBIAN-CVE-2025-14905, released February 23, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-14905
- Priority: High
- CVSS: 7.2 (Moderate)
- EPSS: 0.0129
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 23, 2026

## Description

This update for 389-ds fixes the following issues:  Update to LTS branch 2.7 (jsc#PED-14342):  - CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727).  Bug fixes:  - Resolve python build error that caused lib389 to be missing some libraries. (bsc#1258689)

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | 389-ds opensuse-leap 15.6 | 2.2.10~git200.96444f3c3-150600.8.26.1 | [SUSE-SU-2026:0914-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0914-1.md) | Mar 18, 2026 |
| Linux | 389-ds opensuse-leap 16.0 | 3.0.6~git249.6688af9b2-160000.1.1 | [OPENSUSE-SU-2026:20415-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20415-1.md) | Mar 24, 2026 |
| Linux | 389-ds sles 15.6 | 2.2.10~git200.96444f3c3-150600.8.26.1 | [SUSE-SU-2026:0914-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0914-1.md) | Mar 18, 2026 |
| Linux | 389-ds sles 15.7 | 2.7.0~git144.f597a91d8-150700.3.13.1 | [SUSE-SU-2026:0915-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0915-1.md) | Mar 18, 2026 |
| Linux | 389-ds sles 16.0 | 3.0.6~git249.6688af9b2-160000.1.1 | [SUSE-SU-2026:20927-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20927-1.md) | Mar 24, 2026 |
| Linux | 389-ds-base Debian 13.5 (trixie) | 3.1.2+dfsg1-1+deb13u1 | [DEBIAN-CVE-2025-14905](https://patchblox.com/security/data/fix/linux/debian-cve-2025-14905.md) | Feb 23, 2026 |
| Linux | 389-ds-base RHEL 10 | 3.0.6-17.el10_0 | [RHSA-2026:3504](https://patchblox.com/security/data/fix/linux/rhsa-2026-3504.md) | Mar 12, 2026 |
| Linux | 389-ds-base RHEL 8 | 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | [RHSA-2026:5513](https://patchblox.com/security/data/fix/linux/rhsa-2026-5513.md) | Apr 15, 2026 |
| Linux | 389-ds-base RHEL 9 | 0:2.7.0-10.el9_7 | [RHSA-2026:3189](https://patchblox.com/security/data/fix/linux/rhsa-2026-3189.md) | Mar 12, 2026 |
| Linux | 389-ds-base almalinux 8 | 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 | [ALSA-2026:5513](https://patchblox.com/security/data/fix/linux/alsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base almalinux 9 | 2.7.0-10.el9_7 | [ALSA-2026:3189](https://patchblox.com/security/data/fix/linux/alsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base ol 10 | 0:3.1.3-7.el10_1 | [ELSA-2026-3208](https://patchblox.com/security/data/fix/linux/elsa-2026-3208.md) | Feb 24, 2026 |
| Linux | 389-ds-base ol 8 | 0:1.4.3.39-23.module+el8.10.0+90848+e0e1b1b6 | [ELSA-2026-5513](https://patchblox.com/security/data/fix/linux/elsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base ol 9 | 0:2.7.0-10.el9_7 | [ELSA-2026-3189](https://patchblox.com/security/data/fix/linux/elsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base rocky 10 | 0:3.1.3-7.el10_1 | [RLSA-2026:3208](https://patchblox.com/security/data/fix/linux/rlsa-2026-3208.md) | Feb 26, 2026 |
| Linux | 389-ds-base rocky 8 | 0:1.4.3.39-23.module+el8.10.0+40135+69dd2a79 | [RLSA-2026:5513](https://patchblox.com/security/data/fix/linux/rlsa-2026-5513.md) | Apr 7, 2026 |
| Linux | 389-ds-base rocky 9 | 0:2.7.0-10.el9_7 | [RLSA-2026:3189](https://patchblox.com/security/data/fix/linux/rlsa-2026-3189.md) | Feb 26, 2026 |
| Linux | 389-ds-base-bdb ol 10 | 0:3.1.3-7.el10_1 | [ELSA-2026-3208](https://patchblox.com/security/data/fix/linux/elsa-2026-3208.md) | Feb 24, 2026 |
| Linux | 389-ds-base-devel RHEL 8 | 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | [RHSA-2026:5513](https://patchblox.com/security/data/fix/linux/rhsa-2026-5513.md) | Apr 15, 2026 |
| Linux | 389-ds-base-devel RHEL 9 | 0:2.7.0-10.el9_7 | [RHSA-2026:3189](https://patchblox.com/security/data/fix/linux/rhsa-2026-3189.md) | Mar 12, 2026 |
| Linux | 389-ds-base-devel almalinux 8 | 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 | [ALSA-2026:5513](https://patchblox.com/security/data/fix/linux/alsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-devel almalinux 9 | 2.7.0-10.el9_7 | [ALSA-2026:3189](https://patchblox.com/security/data/fix/linux/alsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base-devel ol 10 | 0:3.1.3-7.el10_1 | [ELSA-2026-3208](https://patchblox.com/security/data/fix/linux/elsa-2026-3208.md) | Feb 24, 2026 |
| Linux | 389-ds-base-devel ol 8 | 0:1.4.3.39-23.module+el8.10.0+90848+e0e1b1b6 | [ELSA-2026-5513](https://patchblox.com/security/data/fix/linux/elsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-devel ol 9 | 0:2.7.0-10.el9_7 | [ELSA-2026-3189](https://patchblox.com/security/data/fix/linux/elsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base-legacy-tools RHEL 8 | 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | [RHSA-2026:5513](https://patchblox.com/security/data/fix/linux/rhsa-2026-5513.md) | Apr 15, 2026 |
| Linux | 389-ds-base-legacy-tools almalinux 8 | 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 | [ALSA-2026:5513](https://patchblox.com/security/data/fix/linux/alsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-legacy-tools ol 8 | 0:1.4.3.39-23.module+el8.10.0+90848+e0e1b1b6 | [ELSA-2026-5513](https://patchblox.com/security/data/fix/linux/elsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-libs RHEL 8 | 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | [RHSA-2026:5513](https://patchblox.com/security/data/fix/linux/rhsa-2026-5513.md) | Apr 15, 2026 |
| Linux | 389-ds-base-libs RHEL 9 | 0:2.7.0-10.el9_7 | [RHSA-2026:3189](https://patchblox.com/security/data/fix/linux/rhsa-2026-3189.md) | Mar 12, 2026 |
| Linux | 389-ds-base-libs almalinux 8 | 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 | [ALSA-2026:5513](https://patchblox.com/security/data/fix/linux/alsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-libs almalinux 9 | 2.7.0-10.el9_7 | [ALSA-2026:3189](https://patchblox.com/security/data/fix/linux/alsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base-libs ol 10 | 0:3.1.3-7.el10_1 | [ELSA-2026-3208](https://patchblox.com/security/data/fix/linux/elsa-2026-3208.md) | Feb 24, 2026 |
| Linux | 389-ds-base-libs ol 8 | 0:1.4.3.39-23.module+el8.10.0+90848+e0e1b1b6 | [ELSA-2026-5513](https://patchblox.com/security/data/fix/linux/elsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-libs ol 9 | 0:2.7.0-10.el9_7 | [ELSA-2026-3189](https://patchblox.com/security/data/fix/linux/elsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base-snmp RHEL 8 | 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | [RHSA-2026:5513](https://patchblox.com/security/data/fix/linux/rhsa-2026-5513.md) | Apr 15, 2026 |
| Linux | 389-ds-base-snmp RHEL 9 | 0:2.7.0-10.el9_7 | [RHSA-2026:3189](https://patchblox.com/security/data/fix/linux/rhsa-2026-3189.md) | Mar 12, 2026 |
| Linux | 389-ds-base-snmp almalinux 8 | 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 | [ALSA-2026:5513](https://patchblox.com/security/data/fix/linux/alsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-snmp almalinux 9 | 2.7.0-10.el9_7 | [ALSA-2026:3189](https://patchblox.com/security/data/fix/linux/alsa-2026-3189.md) | Feb 24, 2026 |
| Linux | 389-ds-base-snmp ol 10 | 0:3.1.3-7.el10_1 | [ELSA-2026-3208](https://patchblox.com/security/data/fix/linux/elsa-2026-3208.md) | Feb 24, 2026 |
| Linux | 389-ds-base-snmp ol 8 | 0:1.4.3.39-23.module+el8.10.0+90848+e0e1b1b6 | [ELSA-2026-5513](https://patchblox.com/security/data/fix/linux/elsa-2026-5513.md) | Mar 24, 2026 |
| Linux | 389-ds-base-snmp ol 9 | 0:2.7.0-10.el9_7 | [ELSA-2026-3189](https://patchblox.com/security/data/fix/linux/elsa-2026-3189.md) | Feb 24, 2026 |
| Linux | python3-lib389 RHEL 8 | 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | [RHSA-2026:5513](https://patchblox.com/security/data/fix/linux/rhsa-2026-5513.md) | Apr 15, 2026 |
| Linux | python3-lib389 RHEL 9 | 0:2.7.0-10.el9_7 | [RHSA-2026:3189](https://patchblox.com/security/data/fix/linux/rhsa-2026-3189.md) | Mar 12, 2026 |
| Linux | python3-lib389 almalinux 10 | 3.1.3-7.el10_1 | [ALSA-2026:3208](https://patchblox.com/security/data/fix/linux/alsa-2026-3208.md) | Feb 24, 2026 |
| Linux | python3-lib389 almalinux 8 | 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 | [ALSA-2026:5513](https://patchblox.com/security/data/fix/linux/alsa-2026-5513.md) | Mar 24, 2026 |
| Linux | python3-lib389 almalinux 9 | 2.7.0-10.el9_7 | [ALSA-2026:3189](https://patchblox.com/security/data/fix/linux/alsa-2026-3189.md) | Feb 24, 2026 |
| Linux | python3-lib389 ol 10 | 0:3.1.3-7.el10_1 | [ELSA-2026-3208](https://patchblox.com/security/data/fix/linux/elsa-2026-3208.md) | Feb 24, 2026 |
| Linux | python3-lib389 ol 8 | 0:1.4.3.39-23.module+el8.10.0+90848+e0e1b1b6 | [ELSA-2026-5513](https://patchblox.com/security/data/fix/linux/elsa-2026-5513.md) | Mar 24, 2026 |
| Linux | python3-lib389 ol 9 | 0:2.7.0-10.el9_7 | [ELSA-2026-3189](https://patchblox.com/security/data/fix/linux/elsa-2026-3189.md) | Feb 24, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.