You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by co...@apache.org on 2026/06/26 10:40:35 UTC

(directory-site) branch master updated: Updating website for Kerby release

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/directory-site.git


The following commit(s) were added to refs/heads/master by this push:
     new 345bd5cf Updating website for Kerby release
345bd5cf is described below

commit 345bd5cfb01ecacf42b6450020d421b5336d59cd
Author: Colm O hEigeartaigh <co...@apache.org>
AuthorDate: Fri Jun 26 11:40:18 2026 +0100

    Updating website for Kerby release
---
 config.toml                   |  2 +-
 source/kerby/downloads.md     |  8 ++++----
 source/kerby/news.md          | 11 ++++++++++-
 source/security-advisories.md |  1 +
 4 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/config.toml b/config.toml
index c761dbd8..ba7a6e4f 100644
--- a/config.toml
+++ b/config.toml
@@ -37,7 +37,7 @@ version_apacheds = "2.0.0.AM27"
 version_api = "1.0.3"
 version_api2 = "2.1.8"
 version_fortress = "3.0.1"
-version_kerby = "2.1.1"
+version_kerby = "2.1.2"
 version_mavibot = "1.0.0-M8"
 version_scimple = "1.0.0-M1"
 version_studio = "2.0.0.v20210717-M17"
diff --git a/source/kerby/downloads.md b/source/kerby/downloads.md
index f16912b5..3827b5ef 100644
--- a/source/kerby/downloads.md
+++ b/source/kerby/downloads.md
@@ -19,7 +19,7 @@ The Apache Kerby is also available as a Maven dependency:
     <dependency>
         <groupId>org.apache.kerby</groupId>
         <artifactId>kerb-client-api-all</artifactId>
-        <version>2.1.1</version>
+        <version>2.1.2</version>
     </dependency>
 
 ### Kerby Server API:
@@ -27,7 +27,7 @@ The Apache Kerby is also available as a Maven dependency:
     <dependency>
         <groupId>org.apache.kerby</groupId>
         <artifactId>kerb-server-api-all</artifactId>
-        <version>2.1.1</version>
+        <version>2.1.2</version>
     </dependency>
 
 ### Kerby ASN1:
@@ -35,7 +35,7 @@ The Apache Kerby is also available as a Maven dependency:
     <dependency>
         <groupId>org.apache.kerby</groupId>
         <artifactId>kerby-asn1</artifactId>
-        <version>2.1.1</version>
+        <version>2.1.2</version>
     </dependency>
 
 ### Kerby Simple KDC:
@@ -43,5 +43,5 @@ The Apache Kerby is also available as a Maven dependency:
     <dependency>
         <groupId>org.apache.kerby</groupId>
         <artifactId>kerb-simplekdc</artifactId>
-        <version>2.1.1</version>
+        <version>2.1.2</version>
     </dependency>
diff --git a/source/kerby/news.md b/source/kerby/news.md
index 3d8b0776..ed5fe004 100644
--- a/source/kerby/news.md
+++ b/source/kerby/news.md
@@ -3,6 +3,15 @@ title: News
 ---
 
 # News
+<h2 class="news">Apache Kerby 2.1.2 released <em>posted on Jun 25, 2026</em></h2>
+
+The Apache Directory team is pleased to announce the release of Apache Kerby
+2.1.2.
+
+This release fixes a new CVE in the ASN1 parser - [CVE-2026-57914](security-advisories.html).
+
+Downloads are available [here](downloads.html)
+
 <h2 class="news">Apache Kerby 2.1.1 released <em>posted on Nov 20, 2025</em></h2>
 
 The Apache Directory team is pleased to announce the release of Apache Kerby
@@ -24,7 +33,7 @@ The Apache Directory team is pleased to announce the release of Apache Kerby
 
 The issues fixed are available [here](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310910&version=12351717).
 
-This release fixes a new CVE in the LDAP backend - CVE-2023-25613.
+This release fixes a new CVE in the LDAP backend - [CVE-2023-25613](security-advisories.html).
 
 Downloads are available [here](downloads.html)
 <h2 class="news">Apache Kerby 2.0.2 released <em>posted on May 9, 2022</em></h2>
diff --git a/source/security-advisories.md b/source/security-advisories.md
index 1c8b423e..5923b0b6 100644
--- a/source/security-advisories.md
+++ b/source/security-advisories.md
@@ -6,6 +6,7 @@ title: Security Advisories
 
 ## Apache Kerby
 
+ * [CVE-2026-57914](https://nvd.nist.gov/vuln/detail/CVE-2026-57914) Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures
  * [CVE-2023-25613](https://nvd.nist.gov/vuln/detail/CVE-2023-25613)
 
 ## Apache LDAP API