oss-security - [ANNOUNCE] Apache Directory LDAP API 1.0.0-M31 released

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAG8=FRj5sL+J6YUJqY95uBJN=vxtS=rWfngAfHk4k2vyShadHw@mail.gmail.com>
Date: Tue, 7 Jul 2015 11:07:37 +0200
From: Emmanuel Lecharny <elecharny@...che.org>
To: announce@...che.org, 
	"users@...ectory.apache.org" <users@...ectory.apache.org>, 
	Apache Directory Developers List <dev@...ectory.apache.org>, fortress@...ectory.apache.org, 
	kerby@...ectory.apache.org, "security@...che.org" <security@...che.org>, 
	oss-security@...ts.openwall.com, bugtraq@...urityfocus.com
Subject: [ANNOUNCE] Apache Directory LDAP API 1.0.0-M31 released

The Apache Directory Team is proud to announce the availability of the
1.0.0-M31 version of the Apache Directory LDAP API.

The Apache Directory LDAP client API is an ongoing effort to provide
an enhanced LDAP API, as a replacement for JNDI and the existing
LDAPAPI (jLdap and Mozilla LDAP API).

This is a schema aware API, with some convenient ways to access a LDAP
server. This API is not only targeting the Apache Directory Server,
but should work pristine with any LDAP server.

It's also an extensible API : new Controls, schema elements and
network layer could be added or used in the near future. It's also
OSGi capable.

This release is fixing a security vulnerability : CVE-2015-3050, a
Timing Attack vulnerability.

Here is the list of the other fixed issues :

*Bugs :*

   - DIRAPI-238 <https://issues.apache.org/jira/browse/DIRAPI-238>
<https://issues.apache.org/jira/browse/DIRAPI-236> - DSML prettyprint
does not work, prints error
   - DIRAPI-240 <https://issues.apache.org/jira/browse/DIRAPI-240>
<https://issues.apache.org/jira/browse/DIRAPI-234> -
   OpenLDAP SchemaObjectRenderer produces schema with syntax error

*Improvements :*

   - DIRAPI-233 <https://issues.apache.org/jira/browse/DIRAPI-233>
<https://issues.apache.org/jira/browse/DIRAPI-233> - OSGi:
   Import package range for slf4j

Feel free to experiment, we highly appreciate your feedback !

Website : http://directory.apache.org/api
Download : http://directory.apache.org/api/downloads.html
User's Guide : http://directory.apache.org/api/user-guide.html

The Apache Directory Team

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.