Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 1c50dc407cfc
Choose a base ref
...
head repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 4af6d342dfe8
Choose a head ref
  • 1 commit
  • 1 file changed
  • 1 contributor

Commits on Nov 1, 2020

  1. openldap: add patch to fix unauthenticated nullptr dereference in slapd 

    This vulnerability does not have a CVE yet.

https://security-tracker.debian.org/tracker/TEMP-0000000-DD4835
https://bugs.openldap.org/show_bug.cgi?id=9370
(cherry picked from commit 307abd9)
    @mweinelt @Mic92
    mweinelt authored and Mic92 committed Nov 1, 2020
    Copy the full SHA
    4af6d34 View commit details
Showing with 10 additions and 0 deletions.
  1. +10 −0 pkgs/development/libraries/openldap/default.nix
10 changes: 10 additions & 0 deletions pkgs/development/libraries/openldap/default.nix
View file
Original file line number Diff line number Diff line change
@@ -8,6 +8,16 @@ stdenv.mkDerivation rec {
sha256 = "0qmy2jkk6v9iqwrsdsn8s7lwzaplr01a2mgf21r6nl66lig7g47l";
};

patches = [
(fetchurl {
# Fix a null-ptr dereference for unauthenticated packet in slapd
# NO CVE yet
# https://bugs.openldap.org/show_bug.cgi?id=9370
url = "https://git.openldap.org/openldap/openldap/-/commit/4c774220a752bf8e3284984890dc0931fe73165d.patch";
sha256 = "1vkbb6szscnhch5zzf6iq104l3dkwd50rih8jk9y0s2vgyz76mil";
})
];

# TODO: separate "out" and "bin"
outputs = [ "out" "dev" "man" "devdoc" ];