From 14a3d2d2fff0717f12cb22a738149762bcc8a11c Mon Sep 17 00:00:00 2001 From: Franz Pletz Date: Thu, 10 Nov 2016 03:49:22 +0100 Subject: [PATCH] 389-ds-base: add patch to fix CVE-2016-5416 cc #20274 --- pkgs/servers/ldap/389/default.nix | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/pkgs/servers/ldap/389/default.nix b/pkgs/servers/ldap/389/default.nix index 8d719bec4f5..6ba60ff1772 100644 --- a/pkgs/servers/ldap/389/default.nix +++ b/pkgs/servers/ldap/389/default.nix @@ -1,5 +1,5 @@ -{ stdenv, fetchurl, pkgconfig, perl, pam, nspr, nss, openldap, db, cyrus_sasl -, svrcore, icu, net_snmp, kerberos, pcre, perlPackages +{ stdenv, fetchurl, fetchpatch, pkgconfig, perl, pam, nspr, nss, openldap +, db, cyrus_sasl, svrcore, icu, net_snmp, kerberos, pcre, perlPackages }: let version = "1.3.5.4"; @@ -19,7 +19,15 @@ stdenv.mkDerivation rec { # TODO: Fix bin/ds-logpipe.py, bin/logconv, bin/cl-dump - patches = [ ./perl-path.patch ]; + patches = [ ./perl-path.patch + # https://fedorahosted.org/389/ticket/48354 + (fetchpatch { + name = "389-ds-base-CVE-2016-5416.patch"; + url = "https://fedorahosted.org/389/changeset/3c2cd48b7d2cb0579f7de6d460bcd0c9bb1157bd/?format=diff&new=3c2cd48b7d2cb0579f7de6d460bcd0c9bb1157bd"; + addPrefixes = true; + sha256 = "1kv3a3di1cihkaf8xdbb5mzvhm4c3frx8rc5mji8xgjyj9ni6xja"; + }) + ]; preConfigure = '' # Create perl paths for library imports in perl scripts