[Pkg-fedora-ds-maintainers] jessie security update for 389-ds-base

[Florian Weimer]

We need to release a security update for 389-ds-base:

  <https://security-tracker.debian.org/tracker/source-package/389-ds-base>

Information about individual vulnerabilities and their fixes appears
to be difficult to track down.

Do you think it would be possible to rebase to a newer upstream
version?  What kind of actions would needed from the LDAP
administrator if we did that?

What's the difference between the 1.3.4 and 1.3.5?  Do you have
information about upstream support life-cycles?