(directory-site) 01/02: Announce LDSAP API 2.1.8 release

[el...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

elecharny pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/directory-site.git

commit 2e5e744e8f07f22cbd41e97dfe237d246bf12a5a
Author: emmanuel lecharny <el...@apache.org>
AuthorDate: Mon Jun 1 00:08:29 2026 +0200

    Announce LDSAP API 2.1.8 release
---
 config.toml                         |  2 +-
 source/api/download-old-versions.md |  1 +
 source/api/news.md                  | 50 +++++++++++++++++++++++++++++++++++++
 static/api/gen-docs/.htaccess       |  4 +--
 4 files changed, 54 insertions(+), 3 deletions(-)

diff --git a/config.toml b/config.toml
index b8f2b028..8b2f1490 100644
--- a/config.toml
+++ b/config.toml
@@ -35,7 +35,7 @@ date = ["date", ":filename", "publishDate", "lastmod"]
 [params]
 version_apacheds = "2.0.0.AM27"
 version_api = "1.0.3"
-version_api2 = "2.1.7"
+version_api2 = "2.1.8"
 version_fortress = "3.0.0"
 version_kerby = "2.1.0"
 version_mavibot = "1.0.0-M8"
diff --git a/source/api/download-old-versions.md b/source/api/download-old-versions.md
index bc9e74ae..cee6d7ab 100644
--- a/source/api/download-old-versions.md
+++ b/source/api/download-old-versions.md
@@ -12,6 +12,7 @@ title: Download Old Versions
 
 | Version| Download Link | Javadoc & XRef |  Date |
 |:-:|:-:|:-:|:-:|
+| Apache LDAP API 2.1.7 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.7) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.7/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.7/xref/) |08/Aug/2024 |
 | Apache LDAP API 2.1.6 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.6) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.6/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.6/xref/) |06/Feb/2024 |
 | Apache LDAP API 2.1.5 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.5) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.5/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.5/xref/) |12/Oct/2023 |
 | Apache LDAP API 2.1.4 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.4) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.4/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.4/xref/) |29/Aug/2023 |
diff --git a/source/api/news.md b/source/api/news.md
index ef1ad788..4e28e518 100644
--- a/source/api/news.md
+++ b/source/api/news.md
@@ -2,6 +2,56 @@
 title: News
 ---
 
+# News 
+
+<h2 class="news">Apache Directory LDAP API 2.1.8 released <em>posted on May 31th, 2026</em></h2>
+
+It fixes an important CVE (CVE-2026-35563):
+
+It was identified that the LDAP client implementation in version 2.1.7
+does not verify if the server certificate matches the intended LDAP
+hostname. While the underlying code validates the certificate chain
+against a trusted authority, the absence of endpoint identification
+allows a valid certificate issued for an entirely unrelated host to be
+improperly accepted. This oversight leaves the connection highly
+vulnerable to server impersonation and complete connection compromise.
+
+The root cause of this vulnerability lies in the incomplete TLS server
+identity verification within the LDAP client implementation.
+
+The attacker requires MITM capability on the network to exploit this
+vulnerability. This attacker must be able to present a certificate
+trusted by the client's configured trust store.
+
+The hostname verification has been enforced in the new version of the LDAP API
+
+This release also fixes many issues in the LDAP messages decoding when using
+drafted PDU, replace all the AntLR parsed grammars by hand crafter
+parsers, allowing the API to now be complied with Java up to 25, plus
+many other issues:
+
+[DIRAPI-406](https://issues.apache.org/jira/browse/DIRAPI-406): Identical Branches in Conditional Node in `action` Method
+[DIRAPI-407](https://issues.apache.org/jira/browse/DIRAPI-407): Dereferencing Variables Before Null Comparison in Multiple Files
+[DIRAPI-410](https://issues.apache.org/jira/browse/DIRAPI-410): unchecked function result in Ava.java
+[DIRAPI-411](https://issues.apache.org/jira/browse/DIRAPI-411): Unused field `normValue` in `UpAndNormValue`
+[DIRAPI-412](https://issues.apache.org/jira/browse/DIRAPI-412): ArrayIndexOutOfBoundsException in Ldap Url parse
+[DIRAPI-414](https://issues.apache.org/jira/browse/DIRAPI-414): NullPointerException in LdapEncoder.encodeMessage
+[DIRAPI-415](https://issues.apache.org/jira/browse/DIRAPI-415): ClassCastException in Asn1Decoder
+[DIRAPI-416](https://issues.apache.org/jira/browse/DIRAPI-416): IllegalArgumentException in Asn1Decoder
+[DIRAPI-417](https://issues.apache.org/jira/browse/DIRAPI-417): ArrayIndexOutOfBoundsException in Asn1Decoder
+[DIRAPI-418](https://issues.apache.org/jira/browse/DIRAPI-418): NullPointerException in Asn1Decoder
+[DIRAPI-419](https://issues.apache.org/jira/browse/DIRAPI-419): NumberFormatException in Asn1Decoder
+[DIRAPI-420](https://issues.apache.org/jira/browse/DIRAPI-420): The Modification operation with an increment accepts more than one value
+[DIRAPI-421](https://issues.apache.org/jira/browse/DIRAPI-421): BAD_COPY_PASTE issue in /ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/SearchParams.java
+[DIRAPI-423](https://issues.apache.org/jira/browse/DIRAPI-423): Update Apache MINA Core from 2.2.3 to 2.2.4 (actually, 2.2.7)
+[DIRAPI-424](https://issues.apache.org/jira/browse/DIRAPI-424): The AttributeType hashCode method can use a pre-computed value
+[DIRAPI-429](https://issues.apache.org/jira/browse/DIRAPI-429): Get rid of AntLR parsers
+
+It also fixes all the existing Javadoc issues.
+
+Downloads are available [here](downloads-2.html) and the User's Guide is [there](user-guide.html)
+
+
 # News 
 
 <h2 class="news">Apache Directory LDAP API 2.1.7 released <em>posted on August 08th, 2024</em></h2>
diff --git a/static/api/gen-docs/.htaccess b/static/api/gen-docs/.htaccess
index 819927d6..dbd50ec2 100644
--- a/static/api/gen-docs/.htaccess
+++ b/static/api/gen-docs/.htaccess
@@ -5,8 +5,8 @@ RewriteEngine On
 RewriteRule ^latest$ https://nightlies.apache.org/directory/api/1.0.2/ [QSA,L]
 RewriteRule ^latest/(.*)$ https://nightlies.apache.org/directory/api/1.0.2/$1 [QSA,L]
 
-RewriteRule ^latest2$ https://nightlies.apache.org/directory/api/2.1.7/ [QSA,L]
-RewriteRule ^latest2/(.*)$ https://nightlies.apache.org/directory/api/2.1.7/$1 [QSA,L]
+RewriteRule ^latest2$ https://nightlies.apache.org/directory/api/2.1.8/ [QSA,L]
+RewriteRule ^latest2/(.*)$ https://nightlies.apache.org/directory/api/2.1.8/$1 [QSA,L]
 
 # Redirect everything else
 RewriteRule ^(.*)$ https://nightlies.apache.org/directory/api/$1 [QSA,L]