_389-ds-base: add patch to fix CVE-2025-14905 (#508544)

2026-04-10 20:29:40 +00:00
parent 2e6f845b3a 897cb09ddf
commit 70027f2e43
1 changed files with 6 additions and 0 deletions
@@ -58,6 +58,12 @@ stdenv.mkDerivation (finalAttrs: {
      hash = "sha256-trzY/fDH3rs66DWbWI+PY46tIC9ShuVqspMHqEEKZYA=";
    })
    ./0001-remove-hard-coded-vendor-paths.patch
+    (fetchpatch {
+      # https://github.com/389ds/389-ds-base/security/advisories/GHSA-4qwg-c5j2-q4hp
+      name = "CVE-2025-14905.patch";
+      url = "https://github.com/389ds/389-ds-base/commit/2e424110def2e3998f6045e136fb0d43f47b7f5a.patch";
+      hash = "sha256-ItxG0bnuNPWLClL677rChTDvDWXxJ2L6ygx4VY2v80w=";
+    })
  ];

  cargoRoot = "src";