This issue was discovered by Ian Murphy (Red Hat).

389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow

389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind