389-ds-base: add patch to fix CVE-2016-5416

cc #20274
This commit is contained in:
Franz Pletz 2016-11-10 03:49:22 +01:00
parent 3190a6c452
commit 14a3d2d2ff
No known key found for this signature in database
GPG key ID: 846FDED7792617B4

View file

@ -1,5 +1,5 @@
{ stdenv, fetchurl, pkgconfig, perl, pam, nspr, nss, openldap, db, cyrus_sasl
, svrcore, icu, net_snmp, kerberos, pcre, perlPackages
{ stdenv, fetchurl, fetchpatch, pkgconfig, perl, pam, nspr, nss, openldap
, db, cyrus_sasl, svrcore, icu, net_snmp, kerberos, pcre, perlPackages
}:
let
version = "1.3.5.4";
@ -19,7 +19,15 @@ stdenv.mkDerivation rec {
# TODO: Fix bin/ds-logpipe.py, bin/logconv, bin/cl-dump
patches = [ ./perl-path.patch ];
patches = [ ./perl-path.patch
# https://fedorahosted.org/389/ticket/48354
(fetchpatch {
name = "389-ds-base-CVE-2016-5416.patch";
url = "https://fedorahosted.org/389/changeset/3c2cd48b7d2cb0579f7de6d460bcd0c9bb1157bd/?format=diff&new=3c2cd48b7d2cb0579f7de6d460bcd0c9bb1157bd";
addPrefixes = true;
sha256 = "1kv3a3di1cihkaf8xdbb5mzvhm4c3frx8rc5mji8xgjyj9ni6xja";
})
];
preConfigure = ''
# Create perl paths for library imports in perl scripts