openldap: 2.4.49 → 2.4.50

Fixes: CVE-2020-12243

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters
with nested boolean expressions can result in denial of service
(daemon crash).
wip/yesman
Martin Weinelt 4 years ago
parent a3689a93a8
commit 2091d42cef
  1. 4
      pkgs/development/libraries/openldap/default.nix

@ -1,11 +1,11 @@
{ stdenv, fetchurl, openssl, cyrus_sasl, db, groff, libtool }:
stdenv.mkDerivation rec {
name = "openldap-2.4.49";
name = "openldap-2.4.50";
src = fetchurl {
url = "https://www.openldap.org/software/download/OpenLDAP/openldap-release/${name}.tgz";
sha256 = "0vp524rsngdcykf6ki7vprsyg7gj8z7hszg8xwxz50219fa1gcg3";
sha256 = "1f46nlfwmys110j36sifm7ah8m8f3s10c3vaiikmmigmifapvdaw";
};
# TODO: separate "out" and "bin"

Loading…
Cancel
Save