Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 445b4026d6c0
Choose a base ref
...
head repository: NixOS/nixpkgs
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: c3d544e2efe2
Choose a head ref
  • 2 commits
  • 1 file changed
  • 2 contributors

Commits on Nov 1, 2020

  1. openldap: add patch to fix unauthenticated nullptr dereference in slapd 

    This vulnerability does not have a CVE yet.

https://security-tracker.debian.org/tracker/TEMP-0000000-DD4835
https://bugs.openldap.org/show_bug.cgi?id=9370
(cherry picked from commit 307abd9)
    @mweinelt
    mweinelt committed Nov 1, 2020
    Copy the full SHA
    3b3b0d5 View commit details

  2. Merge pull request #102371 from mweinelt/20.03/openldap 

    [staging-20.03] openldap: add patch to fix unauthenticated nullptr dereference in slapd
    @Mic92
    Mic92 authored Nov 1, 2020

    Verified

    This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
    GPG key ID: 4AEE18F83AFDEB23
    Expired
    Verified
    Learn about vigilant mode
    Copy the full SHA
    c3d544e View commit details
Showing with 10 additions and 0 deletions.
  1. +10 −0 pkgs/development/libraries/openldap/default.nix
10 changes: 10 additions & 0 deletions pkgs/development/libraries/openldap/default.nix
View file
Original file line number Diff line number Diff line change
@@ -8,6 +8,16 @@ stdenv.mkDerivation rec {
sha256 = "1f46nlfwmys110j36sifm7ah8m8f3s10c3vaiikmmigmifapvdaw";
};

patches = [
(fetchurl {
# Fix a null-ptr dereference for unauthenticated packet in slapd
# NO CVE yet
# https://bugs.openldap.org/show_bug.cgi?id=9370
url = "https://git.openldap.org/openldap/openldap/-/commit/4c774220a752bf8e3284984890dc0931fe73165d.patch";
sha256 = "1vkbb6szscnhch5zzf6iq104l3dkwd50rih8jk9y0s2vgyz76mil";
})
];

# TODO: separate "out" and "bin"
outputs = [ "out" "dev" "man" "devdoc" ];