This issue was discovered by Ian Murphy (Red Hat).

389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()

389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing

389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass

389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation

389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service

389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing