From 9f467635b53b8192d63f30e265c0a3da5f688f3a Mon Sep 17 00:00:00 2001
From: Simon Hauser <simon.hauser@helsinki-systems.de>
Date: Fri, 23 May 2025 08:13:18 +0200
Subject: [PATCH] openldap: 2.6.9 -> 2.6.13

OpenLDAP 2.6.10 Release (2025/05/22)
	Added slapd microsecond timestamp format for local logging (ITS#10140)
	Fixed libldap ldap_result behavior with LDAP_MSG_RECEIVED (ITS#10229)
	Fixed lloadd handling of starttls critical (ITS#10323)
	Fixed slapd syncrepl when used with slapo-rwm (ITS#10290)
	Fixed slapd regression with certain searches (ITS#10307)
	Fixed slapo-autoca olcAutoCAserverClass object (ITS#10288)
	Fixed slapo-pcache caching behaviors (ITS#10270)
OpenLDAP 2.6.11 Release (2026/01/28)
	Fixed slapd to use fresh timestamp for lastbind (ITS#10379)
	Fixed slapd delta-syncrepl to always use logDB rootdn (ITS#10360)
	Fixed slapd reverse lookup of proxied IPv6 addresses (ITS#10387)
	Fixed slapd logging buffer overflow (ITS#10410)
	Fixed slapd-ldap response when invalid secprops is configured (ITS#10392)
	Fixed slapd-mdb error when deleting last child of a branch (ITS#10304)
	Fixed slapd-mdb check for pool pause in search (ITS#10191)
	Fixed slapo-memberof clash with refint on subtree rename (ITS#10398)
	Fixed slapo-syncprov use correct rootDN for accesslog replay (ITS#10385)
OpenLDAP 2.6.12 Release (2026/01/29)
	Fixed libldap to reject empty types in LDIF (ITS#10429)
	Fixed libldap to not scroll past nul bytes (ITS#10430)
	Fixed libldap to enforce stop when encountering nul-leading line (ITS#10431)
OpenLDAP 2.6.13 Release (2026/03/09)
	Fixed liblber ber_bvreplace_x potential NULL dereference (ITS#10438)
	Fixed libldap heap buffer overflow in parse_whsp (ITS#10430)
	Fixed slap(add|modify) to not recreate config frontend (ITS#10414)
	Fixed slapd authzPrettyNormal function memory leak (ITS#10446)
	Fixed slapd memory leak in get_mra function (ITS#10445)
	Fixed slapd memory leak in parseAssert and parseReturnFilter functions (ITS#10450)
	Fixed slapd memory leak in parseReadAttrs function (ITS#10449)
	Fixed slapd slapd_sasl_mechs race condition (ITS#10443)
	Fixed slapd syncrepl to be more efficient with refresh task (ITS#10413)
	Fixed slapd unbind/close race condition (ITS#10258)
	Fixed slapd-ldap memory leak in ldap_chain_parse_ctrl function (ITS#10447)
	Fixed slapd-mdb always initialize pausepoll (ITS#10191)
	Fixed slapo-constraint to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-dds minttl incorrectly set in certain scenarios (ITS#10442)
	Fixed slapo-memberof to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-nestgroup to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-retcode to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-syncprov to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-syncprov memory leak in syncprov_parseCtrl (ITS#10448)
	Fixed slapo-translucent to not propagate request controls to internal ops (ITS#10440)
---
 pkgs/by-name/op/openldap/package.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/op/openldap/package.nix b/pkgs/by-name/op/openldap/package.nix
index c50d7b3bda3c..897a3192a3fc 100644
--- a/pkgs/by-name/op/openldap/package.nix
+++ b/pkgs/by-name/op/openldap/package.nix
@@ -22,11 +22,11 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "openldap";
-  version = "2.6.9";
+  version = "2.6.13";
 
   src = fetchurl {
     url = "https://www.openldap.org/software/download/OpenLDAP/openldap-release/openldap-${finalAttrs.version}.tgz";
-    hash = "sha256-LLfcc+nINA3/DZk1f7qleKvzDMZhnwUhlyxVVoHmsv8=";
+    hash = "sha256-1pO0lRekLvuFoaNkoxCu0WpT1CjRtGwNMe8/unj8tlY=";
   };
 
   patches = [
@@ -60,7 +60,7 @@ stdenv.mkDerivation (finalAttrs: {
     libtool
     openssl
   ]
-  ++ lib.optionals (stdenv.hostPlatform.isLinux) [
+  ++ lib.optionals stdenv.hostPlatform.isLinux [
     libxcrypt # causes linking issues on *-darwin
   ]
   ++ lib.optionals withModules [