Security vs. config bug?

Okay, now we have a really weird situation....

On the one hand, OpenLDAP 2.3.23 has a problem with new-style slapd.d

slapadd -v -F /etc/openldap/slapd.d -l /root/200605191201.ldif
slapadd: ldif.c:416: r_enum_tree: Assertion `itmp.bv_val[ 0 ] != '-'' failed.
Aborted

(bug #133898 on bugs.g.o)

On the other hand we have a (hard to abuse) weakness in slurpd (which is used for some older replication setups)
(bug #134010 on bugs.g.o)

But masking 2.3 completely would really end up in breaking many setups and databases, so no option as well.