import slapi-nis-0.56.6-2.1.module+el8.4.0+12579+0538eac8

This commit is contained in:
CentOS Sources 2021-11-02 06:36:17 -04:00 committed by Stepan Oksanichenko
parent 258c451f30
commit 1d53e99040
2 changed files with 33 additions and 1 deletions

View File

@ -0,0 +1,27 @@
From 02a9cb46ece79d6205a847e6941a772febe47cff Mon Sep 17 00:00:00 2001
From: Viktor Ashirov <vashirov@redhat.com>
Date: Thu, 5 Aug 2021 16:04:49 +0200
Subject: [PATCH] back-sch: fix memory leak in backend_search_cb()
Resolves: rhbz#1967906
Signed-off-by: Viktor Ashirov <vashirov@redhat.com>
---
src/back-sch.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/back-sch.c b/src/back-sch.c
index 0ed06fb..172d619 100644
--- a/src/back-sch.c
+++ b/src/back-sch.c
@@ -1793,6 +1793,7 @@ backend_search_cb(Slapi_PBlock *pb)
slapi_ch_free_string(&target);
if (cbdata.answer == FALSE) {
/* None of the configured trees in the sets matched the target at all, ignore search */
+ slapi_sdn_free(&cbdata.target_dn);
return 0;
}
}
--
2.31.1

View File

@ -11,7 +11,7 @@
Name: slapi-nis
Version: 0.56.6
Release: 2%{?dist}
Release: 2.1%{?dist}
Summary: NIS Server and Schema Compatibility plugins for Directory Server
Group: System Environment/Daemons
License: GPLv2
@ -19,6 +19,7 @@ URL: http://pagure.io/slapi-nis/
Source0: https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz
Source1: https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz.asc
Patch1: cve-2021-3480-fix.patch
Patch2: slapi-nis-bz2003607.patch
BuildRequires: autoconf
BuildRequires: automake
@ -58,6 +59,7 @@ for attributes from multiple entries in the tree.
%prep
%setup -q
%patch1 -p1
%patch2 -p1
%build
autoconf --force
@ -86,6 +88,9 @@ make check
%{_sbindir}/nisserver-plugin-defs
%changelog
* Mon Sep 13 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2.1
- Resolves: rhbz#2003607 - fix memory leak in backend_search_cb
* Wed Apr 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
- CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
- Resolves: rhbz#1944713