CLSA-2026-1789654818 389-ds-base: Fix of 5 CVEs

CVE-2026-18355: reject SASL packet lengths below the already-consumed offset in sasliostartpacket - CVE-2026-18453: avoid NULL pointer dereference in opsharedsearch with paged results and USEONEBACKEND - CVE-2026-18922: clear the stale SASL identity in the Cyrus SASL auxiliary property lookup -...

CLSA-2026-1789580964 389-ds-base: Fix of 4 CVEs

CVE-2026-18922: reset the SASL auxprop context after a failed one-shot bind so a stale canonuser identity cannot be inherited by a later successful bind - CVE-2026-18355: validate the minimum SASL packet length in sasliostartpacket to prevent an unsigned underflow in saslioreadpacket -...