nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-03 13:30:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

inspircd: apply patches for missing escaping in LDAP modules

Browse Source 
This can be used to bypass auth or gain privileges for certain
configurations.
https://docs.inspircd.org/security/2026-01/
This commit is contained in:
sterni
2026-06-06 17:44:53 +02:00
parent a8ba261102
commit d165db786c
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
pkgs/by-name/in/inspircd/package.nix
View File

@@ -67,6 +67,7 @@ in
lib,
stdenv,
fetchFromGitHub,
fetchpatch,
nixosTests,
perl,
pkg-config,
@@ -157,6 +158,22 @@ stdenv.mkDerivation rec {
sha256 = "sha256-fMfsNbkp9M8KiuhwOEFmPjowZ4JLP4IpX6LRO9aLHzY=";
};
patches = [
# Additions to LDAP code for the benefit of the next patch
(fetchpatch {
name = "inspircd-ldap-api.patch";
url = "https://github.com/inspircd/inspircd/commit/b7e5357b144c2e20c72431e22f0f2b13e5be82ce.patch";
hash = "sha256-nrgjmSBEIXdhlu/3WbMspIgSTHR29D4TfvKZ26JcYHs=";
})
# Resolves missing escaping in LDAP search filters which can be used to bypass auth
# https://docs.inspircd.org/security/2026-01/
(fetchpatch {
name = "inspircd-ldap-filter-escape.patch";
url = "https://github.com/inspircd/inspircd/commit/6319ae4fb8c10dabc9464ad49faec532096fbcb5.patch";
hash = "sha256-RtwNZA3PZDtQ5wW0TfCrvD+zfQHTFLg4mQRP5/qrAzg=";
})
];
outputs = [
"bin"
"lib"