This issue was discovered by Ian Murphy (Red Hat).

389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)

389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler