_389-ds-base
389-ds-base 3.3.0 · pkgs/by-name/_3/_389-ds-base/package.nix
Health
Risk
risk 28 medium
- +20 3 open advisories
- +8 3.3.0 is behind upstream 3.3.1
Version
3.3.0 upstream 3.3.1
Channels
Hydra
succeeded 1d ago
Advisories
NIXPKGS-2026-1892 medium 6.5 EPSS 0.2% 389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions · #529819
CVE-2026-11611
NIXPKGS-2026-2884 EPSS 0.4% 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result · #569370
CVE-2026-86345
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 3
_389-ds-base: enable __structuredAttrs, strictDeps
#544463 by FliegendeWurst · opened 2mo ago · checks pass
various: fixes for strictDeps, structuredAttrs, and parallelBuilding
#529404 by GraysonTinker · opened 4mo ago · checks pass
by-name-overlay: enable `structuredAttrs`, `strictDeps` and `parallelBuilding` for some directories draft
#483445 by qweered · opened 8mo ago
Closed or merged in the synced window 1
treewide: use systemdLibs for mail, directory and service daemons
#569815 by RaitoBezarius · merged 12d ago
Issues 3
389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result 1.severity: security
#569370 by nixpkgs-security-tracker · opened 2w ago · 0 comments
389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions 1.severity: security
#529819 by nixpkgs-security-tracker · opened 4mo ago · 0 comments
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) 1.severity: security
#522569 by nixpkgs-security-tracker · opened 4mo ago · 0 comments