Merge pull request #102359 from mweinelt/openldap

[staging] openldap: add patch to fix unauthenticated nullptr dereference in slapd

authored by Jörg Thalheim and committed by GitHub b7ef4d7d d64f4d03

+10
+10
pkgs/development/libraries/openldap/default.nix
··· 8 sha256 = "0qmy2jkk6v9iqwrsdsn8s7lwzaplr01a2mgf21r6nl66lig7g47l"; 9 }; 10 11 # TODO: separate "out" and "bin" 12 outputs = [ "out" "dev" "man" "devdoc" ]; 13
··· 8 sha256 = "0qmy2jkk6v9iqwrsdsn8s7lwzaplr01a2mgf21r6nl66lig7g47l"; 9 }; 10 11 + patches = [ 12 + (fetchurl { 13 + # Fix a null-ptr dereference for unauthenticated packet in slapd 14 + # NO CVE yet 15 + # https://bugs.openldap.org/show_bug.cgi?id=9370 16 + url = "https://git.openldap.org/openldap/openldap/-/commit/4c774220a752bf8e3284984890dc0931fe73165d.patch"; 17 + sha256 = "1vkbb6szscnhch5zzf6iq104l3dkwd50rih8jk9y0s2vgyz76mil"; 18 + }) 19 + ]; 20 + 21 # TODO: separate "out" and "bin" 22 outputs = [ "out" "dev" "man" "devdoc" ]; 23