You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by el...@apache.org on 2026/05/31 22:10:07 UTC
(directory-site) branch master updated (b5e4927f -> cbc0d983)
This is an automated email from the ASF dual-hosted git repository.
elecharny pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/directory-site.git
from b5e4927f Updated the LDAP API dev page, fixed some typo in studio page, added some internal design diagram
new 2e5e744e Announce LDSAP API 2.1.8 release
new cbc0d983 Merged with trunk
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
config.toml | 2 +-
source/api/download-old-versions.md | 1 +
source/api/news.md | 50 +++++++++++++++++++++++++++++++++++++
static/api/gen-docs/.htaccess | 4 +--
4 files changed, 54 insertions(+), 3 deletions(-)
(directory-site) 01/02: Announce LDSAP API 2.1.8 release
Posted by el...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
elecharny pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/directory-site.git
commit 2e5e744e8f07f22cbd41e97dfe237d246bf12a5a
Author: emmanuel lecharny <el...@apache.org>
AuthorDate: Mon Jun 1 00:08:29 2026 +0200
Announce LDSAP API 2.1.8 release
---
config.toml | 2 +-
source/api/download-old-versions.md | 1 +
source/api/news.md | 50 +++++++++++++++++++++++++++++++++++++
static/api/gen-docs/.htaccess | 4 +--
4 files changed, 54 insertions(+), 3 deletions(-)
diff --git a/config.toml b/config.toml
index b8f2b028..8b2f1490 100644
--- a/config.toml
+++ b/config.toml
@@ -35,7 +35,7 @@ date = ["date", ":filename", "publishDate", "lastmod"]
[params]
version_apacheds = "2.0.0.AM27"
version_api = "1.0.3"
-version_api2 = "2.1.7"
+version_api2 = "2.1.8"
version_fortress = "3.0.0"
version_kerby = "2.1.0"
version_mavibot = "1.0.0-M8"
diff --git a/source/api/download-old-versions.md b/source/api/download-old-versions.md
index bc9e74ae..cee6d7ab 100644
--- a/source/api/download-old-versions.md
+++ b/source/api/download-old-versions.md
@@ -12,6 +12,7 @@ title: Download Old Versions
| Version| Download Link | Javadoc & XRef | Date |
|:-:|:-:|:-:|:-:|
+| Apache LDAP API 2.1.7 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.7) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.7/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.7/xref/) |08/Aug/2024 |
| Apache LDAP API 2.1.6 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.6) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.6/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.6/xref/) |06/Feb/2024 |
| Apache LDAP API 2.1.5 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.5) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.5/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.5/xref/) |12/Oct/2023 |
| Apache LDAP API 2.1.4 | [Download](https://archive.apache.org/dist/directory/api/dist/2.1.4) | [Javadoc](https://nightlies.apache.org/directory/api/2.1.4/apidocs/), [Xref](https://nightlies.apache.org/directory/api/2.1.4/xref/) |29/Aug/2023 |
diff --git a/source/api/news.md b/source/api/news.md
index ef1ad788..4e28e518 100644
--- a/source/api/news.md
+++ b/source/api/news.md
@@ -2,6 +2,56 @@
title: News
---
+# News
+
+<h2 class="news">Apache Directory LDAP API 2.1.8 released <em>posted on May 31th, 2026</em></h2>
+
+It fixes an important CVE (CVE-2026-35563):
+
+It was identified that the LDAP client implementation in version 2.1.7
+does not verify if the server certificate matches the intended LDAP
+hostname. While the underlying code validates the certificate chain
+against a trusted authority, the absence of endpoint identification
+allows a valid certificate issued for an entirely unrelated host to be
+improperly accepted. This oversight leaves the connection highly
+vulnerable to server impersonation and complete connection compromise.
+
+The root cause of this vulnerability lies in the incomplete TLS server
+identity verification within the LDAP client implementation.
+
+The attacker requires MITM capability on the network to exploit this
+vulnerability. This attacker must be able to present a certificate
+trusted by the client's configured trust store.
+
+The hostname verification has been enforced in the new version of the LDAP API
+
+This release also fixes many issues in the LDAP messages decoding when using
+drafted PDU, replace all the AntLR parsed grammars by hand crafter
+parsers, allowing the API to now be complied with Java up to 25, plus
+many other issues:
+
+[DIRAPI-406](https://issues.apache.org/jira/browse/DIRAPI-406): Identical Branches in Conditional Node in `action` Method
+[DIRAPI-407](https://issues.apache.org/jira/browse/DIRAPI-407): Dereferencing Variables Before Null Comparison in Multiple Files
+[DIRAPI-410](https://issues.apache.org/jira/browse/DIRAPI-410): unchecked function result in Ava.java
+[DIRAPI-411](https://issues.apache.org/jira/browse/DIRAPI-411): Unused field `normValue` in `UpAndNormValue`
+[DIRAPI-412](https://issues.apache.org/jira/browse/DIRAPI-412): ArrayIndexOutOfBoundsException in Ldap Url parse
+[DIRAPI-414](https://issues.apache.org/jira/browse/DIRAPI-414): NullPointerException in LdapEncoder.encodeMessage
+[DIRAPI-415](https://issues.apache.org/jira/browse/DIRAPI-415): ClassCastException in Asn1Decoder
+[DIRAPI-416](https://issues.apache.org/jira/browse/DIRAPI-416): IllegalArgumentException in Asn1Decoder
+[DIRAPI-417](https://issues.apache.org/jira/browse/DIRAPI-417): ArrayIndexOutOfBoundsException in Asn1Decoder
+[DIRAPI-418](https://issues.apache.org/jira/browse/DIRAPI-418): NullPointerException in Asn1Decoder
+[DIRAPI-419](https://issues.apache.org/jira/browse/DIRAPI-419): NumberFormatException in Asn1Decoder
+[DIRAPI-420](https://issues.apache.org/jira/browse/DIRAPI-420): The Modification operation with an increment accepts more than one value
+[DIRAPI-421](https://issues.apache.org/jira/browse/DIRAPI-421): BAD_COPY_PASTE issue in /ldap/model/src/main/java/org/apache/directory/api/ldap/model/message/SearchParams.java
+[DIRAPI-423](https://issues.apache.org/jira/browse/DIRAPI-423): Update Apache MINA Core from 2.2.3 to 2.2.4 (actually, 2.2.7)
+[DIRAPI-424](https://issues.apache.org/jira/browse/DIRAPI-424): The AttributeType hashCode method can use a pre-computed value
+[DIRAPI-429](https://issues.apache.org/jira/browse/DIRAPI-429): Get rid of AntLR parsers
+
+It also fixes all the existing Javadoc issues.
+
+Downloads are available [here](downloads-2.html) and the User's Guide is [there](user-guide.html)
+
+
# News
<h2 class="news">Apache Directory LDAP API 2.1.7 released <em>posted on August 08th, 2024</em></h2>
diff --git a/static/api/gen-docs/.htaccess b/static/api/gen-docs/.htaccess
index 819927d6..dbd50ec2 100644
--- a/static/api/gen-docs/.htaccess
+++ b/static/api/gen-docs/.htaccess
@@ -5,8 +5,8 @@ RewriteEngine On
RewriteRule ^latest$ https://nightlies.apache.org/directory/api/1.0.2/ [QSA,L]
RewriteRule ^latest/(.*)$ https://nightlies.apache.org/directory/api/1.0.2/$1 [QSA,L]
-RewriteRule ^latest2$ https://nightlies.apache.org/directory/api/2.1.7/ [QSA,L]
-RewriteRule ^latest2/(.*)$ https://nightlies.apache.org/directory/api/2.1.7/$1 [QSA,L]
+RewriteRule ^latest2$ https://nightlies.apache.org/directory/api/2.1.8/ [QSA,L]
+RewriteRule ^latest2/(.*)$ https://nightlies.apache.org/directory/api/2.1.8/$1 [QSA,L]
# Redirect everything else
RewriteRule ^(.*)$ https://nightlies.apache.org/directory/api/$1 [QSA,L]
(directory-site) 02/02: Merged with trunk
Posted by el...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
elecharny pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/directory-site.git
commit cbc0d983e35a460039d057b35ae21f97ca67334b
Merge: 2e5e744e b5e4927f
Author: emmanuel lecharny <el...@apache.org>
AuthorDate: Mon Jun 1 00:09:56 2026 +0200
Merged with trunk
.asf.yaml | 13 +
config.toml | 4 +-
layouts/partials/footer.html | 2 +-
.../4-authentication-and-authorization.md | 2 +-
source/apacheds/advanced-ug/4.1-authentication.md | 2 +-
source/apacheds/advanced-ug/4.1.1-simple-authn.md | 2 +-
.../advanced-ug/4.1.1.3-unauthenticated-authn.md | 2 +-
.../advanced-ug/4.1.1.4-ss-password-hash.md | 5 +-
source/api/developer-guide.md | 78 +-
.../attributeType-state.graphml | 643 +++++
.../attributeValue-state.graphml | 3016 ++++++++++++++++++++
source/api/user-guide/1.1-java-and-ldap.md | 2 +-
source/api/user-guide/1.4-preparation-to-code.md | 4 +-
source/api/user-guide/2-basic-ldap-api-usage.md | 12 +-
.../api/user-guide/2.1-connection-disconnection.md | 39 +-
source/api/user-guide/2.2-binding-unbinding.md | 74 +-
source/fortress/download-old-versions.md | 1 +
source/fortress/news.md | 10 +-
source/kerby/downloads.md | 8 +-
source/kerby/news.md | 6 +
source/studio/news.md | 2 +-
.../images/password-hashing-config-left.png | Bin 0 -> 51932 bytes
.../images/password-hashing-config-right.png | Bin 0 -> 49525 bytes
.../advanced-ug/images/password-hashing-config.png | Bin 91368 -> 93383 bytes
static/css/common.css | 8 +-
static/fortress/gen-docs/.htaccess | 4 +-
static/images/oak-header.svg | 86 +
27 files changed, 3912 insertions(+), 113 deletions(-)
diff --cc config.toml
index 8b2f1490,4c48bbcf..c761dbd8
--- a/config.toml
+++ b/config.toml
@@@ -35,9 -35,9 +35,9 @@@ date = ["date", ":filename", "publishDa
[params]
version_apacheds = "2.0.0.AM27"
version_api = "1.0.3"
-version_api2 = "2.1.7"
+version_api2 = "2.1.8"
- version_fortress = "3.0.0"
- version_kerby = "2.1.0"
+ version_fortress = "3.0.1"
+ version_kerby = "2.1.1"
version_mavibot = "1.0.0-M8"
version_scimple = "1.0.0-M1"
version_studio = "2.0.0.v20210717-M17"