dev  

Messages by Thread

• [PR] Bump ossf/scorecard-action from 2.4.4 to 2.5.0 [directory-kerby] via GitHub
• [PR] Bump actions/setup-java from 6.0.1 to 6.1.0 [directory-kerby] via GitHub
• [PR] Bump ossf/scorecard-action from 2.4.4 to 2.5.0 [directory-ldap-api] via GitHub
  • Re: [PR] Bump ossf/scorecard-action from 2.4.4 to 2.5.0 [directory-ldap-api] via GitHub
• [PR] Bump actions/setup-java from 6.0.1 to 6.1.0 [directory-ldap-api] via GitHub
  • Re: [PR] Bump actions/setup-java from 6.0.1 to 6.1.0 [directory-ldap-api] via GitHub
• [PR] Bump org.jline:jline from 3.30.6 to 4.4.8 [directory-kerby] via GitHub
• [PR] Bump actions/setup-java from 6.0.0 to 6.1.0 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/upload-sarif from 4.37.9 to 4.39.0 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.39.0 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.9 to 4.39.0 [directory-scimple] via GitHub
• [jira] [Commented] (DIRSERVER-1944) ApacheDS 2.0.0-M15 Replication on secure port doesnt work Joel Strasser (Jira)
• [PR] Introduce new configuration option for replication over LDAPS [directory-server] via GitHub
• [PR] Introduce new configuration option for replication over LDAPS [directory-ldap-api] via GitHub
  • Re: [PR] Introduce new configuration option for replication over LDAPS [directory-ldap-api] via GitHub
• [PR] Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 [directory-kerby] via GitHub
• [PR] Bump netty.version from 4.2.18.Final to 4.2.19.Final [directory-kerby] via GitHub
• [PR] Bump org.apache.mina:mina-core from 2.2.9 to 2.2.10 [directory-ldap-api] via GitHub
  • Re: [PR] Bump org.apache.mina:mina-core from 2.2.9 to 2.2.10 [directory-ldap-api] via GitHub
• [PR] Bump org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0 [directory-project] via GitHub
• [PR] Bump maven.version from 3.9.16 to 3.10.0 [directory-server] via GitHub
• [PR] Bump org.slf4j:slf4j-api from 1.7.36 to 2.0.20 [directory-server] via GitHub
• [PR] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 [directory-server] via GitHub
• [PR] Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.2 to 3.16.0 [directory-server] via GitHub
• [PR] Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 [directory-server] via GitHub
• [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-kerby] via GitHub
  • Re: [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-kerby] via GitHub
• [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-ldap-api] via GitHub
  • Re: [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-ldap-api] via GitHub
• [PR] Apply search authorization to persistent search notifications [directory-server] via GitHub
  • Re: [PR] Apply search authorization to persistent search notifications [directory-server] via GitHub
• [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
  • Re: [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
  • Re: [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
• [PR] Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
  • Re: [PR] Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
  • Re: [PR] Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.3 [directory-scimple] via GitHub
• [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-scimple] via GitHub
• [jira] [Created] (DIRAPI-495) Ldap connection stored in the pool are now encapsukated into MonitoringLdapConnection Jira
• [PR] Bump actions/setup-java from 5.2.0 to 6.0.1 [directory-server] via GitHub
  • Re: [PR] Bump actions/setup-java from 5.2.0 to 6.0.1 [directory-server] via GitHub
• [PR] Bump the codeql-action group with 4 updates [directory-server] via GitHub
  • Re: [PR] Bump the codeql-action group with 4 updates [directory-server] via GitHub
• [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-server] via GitHub
  • Re: [PR] Bump actions/upload-artifact from 7.0.1 to 7.0.2 [directory-server] via GitHub
• [PR] Bump bcprov.version from 1.84 to 1.86 [directory-server] via GitHub
  • Re: [PR] Bump bcprov.version from 1.85 to 1.86 [directory-server] via GitHub
• [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.3 [directory-server] via GitHub
  • Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.3 [directory-server] via GitHub
• [PR] Bump org.apache.maven:apache-maven from 3.9.1 to 3.10.0 [directory-server] via GitHub
  • Re: [PR] Bump org.apache.maven:apache-maven from 3.9.1 to 3.10.0 [directory-server] via GitHub
• [PR] Bump ch.qos.logback:logback-classic from 1.5.34 to 1.6.5 [directory-server] via GitHub
  • Re: [PR] Bump ch.qos.logback:logback-classic from 1.5.34 to 1.6.5 [directory-server] via GitHub
• [PR] Bump commons-codec:commons-codec from 1.22.1 to 1.23.0 [directory-ldap-api] via GitHub
  • Re: [PR] Bump commons-codec:commons-codec from 1.22.1 to 1.23.0 [directory-ldap-api] via GitHub
• [PR] Bump org.apache:apache from 39 to 40 [directory-kerby] via GitHub
  • Re: [PR] Bump org.apache:apache from 39 to 40 [directory-kerby] via GitHub
• [PR] Bump netty.version from 4.2.17.Final to 4.2.18.Final [directory-kerby] via GitHub
  • Re: [PR] Bump netty.version from 4.2.17.Final to 4.2.18.Final [directory-kerby] via GitHub
• [PR] Update eclipse-ee4j/embedded-glassfish Docker tag to v8.0.5 [directory-scimple] via GitHub
• [PR] Bump org.apache.zookeeper:zookeeper from 3.9.5 to 3.9.6 [directory-kerby] via GitHub
  • Re: [PR] Bump org.apache.zookeeper:zookeeper from 3.9.5 to 3.9.6 [directory-kerby] via GitHub
• [PR] Bump ldap.api.version from 2.1.8 to 2.1.9 [directory-kerby] via GitHub
  • Re: [PR] Bump ldap.api.version from 2.1.8 to 2.1.9 [directory-kerby] via GitHub
• [PR] Updating expired test certs [directory-kerby] via GitHub
  • Re: [PR] Updating expired test certs [directory-kerby] via GitHub
• [PR] Bump actions/setup-java from 5.7.0 to 6.0.1 [directory-kerby] via GitHub
  • Re: [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [directory-kerby] via GitHub
  • Re: [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [directory-kerby] via GitHub
• [PR] Bump the codeql-action group with 4 updates [directory-kerby] via GitHub
  • Re: [PR] Bump the codeql-action group with 4 updates [directory-kerby] via GitHub
  • Re: [PR] Bump the codeql-action group across 1 directory with 4 updates [directory-kerby] via GitHub
  • Re: [PR] Bump the codeql-action group across 1 directory with 4 updates [directory-kerby] via GitHub
  • Re: [PR] Bump the codeql-action group across 1 directory with 4 updates [directory-kerby] via GitHub
  • Re: [PR] Bump the codeql-action group across 1 directory with 4 updates [directory-kerby] via GitHub
  • [PR] Bump the codeql-action group with 4 updates [directory-kerby] via GitHub
  • Re: [PR] Bump the codeql-action group with 4 updates [directory-kerby] via GitHub
  • [PR] Bump the codeql-action group with 4 updates [directory-kerby] via GitHub
• [PR] Bump the codeql-action group with 4 updates [directory-ldap-api] via GitHub
  • Re: [PR] Bump the codeql-action group with 4 updates [directory-ldap-api] via GitHub
  • [PR] Bump the codeql-action group with 4 updates [directory-ldap-api] via GitHub
  • Re: [PR] Bump the codeql-action group with 4 updates [directory-ldap-api] via GitHub
  • [PR] Bump the codeql-action group with 4 updates [directory-ldap-api] via GitHub
  • Re: [PR] Bump the codeql-action group with 4 updates [directory-ldap-api] via GitHub
• [PR] Bump org.jline:jline from 3.30.6 to 4.4.6 [directory-kerby] via GitHub
  • Re: [PR] Bump org.jline:jline from 3.30.6 to 4.4.6 [directory-kerby] via GitHub
  • Re: [PR] Bump org.jline:jline from 3.30.6 to 4.4.6 [directory-kerby] via GitHub
• [PR] Bump com.puppycrawl.tools:checkstyle from 14.1.0 to 14.3.0 [directory-project] via GitHub
• [PR] Update dependency maven to v3.10.0 [directory-scimple] via GitHub
• [PR] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 [directory-ldap-api] via GitHub
  • Re: [PR] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 [directory-ldap-api] via GitHub
• [apacheds] Post a new snapshot for AM28 please Gary D. Gregory
  • Re: [apacheds] Post a new snapshot for AM28 please Emmanuel Lecharny
  • Re: [apacheds] Post a new snapshot for AM28 please Colm O hEigeartaigh
  • Re: [apacheds] Post a new snapshot for AM28 please Colm O hEigeartaigh
  • Re: [apacheds] Post a new snapshot for AM28 please Emmanuel Lecharny
  • Re: [apacheds] Post a new snapshot for AM28 please Emmanuel Lécharny
  • Re: [apacheds] Post a new snapshot for AM28 please Colm O hEigeartaigh
• [PR] Add characterization tests for SyncRepl (SyncRepl 18% -> 99% line coverage) [directory-studio] via GitHub
• [jira] [Commented] (DIRAPI-456) Uncaught IllegalArgumentException on unknown VLV result code Jira
• [jira] [Commented] (DIRAPI-460) ComplexDnParser silently discards trailing garbage after last RDN Jira
• [jira] [Commented] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Commented] (DIRAPI-454) NPE decoding endTransaction response control with unregistered OID Jira
• [jira] [Resolved] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [jira] [Commented] (DIRAPI-464) Stored-credential bcrypt work factor drives unbounded CPU cost at bind Jira
• [jira] [Resolved] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Commented] (DIRAPI-477) SASL layer length field lacks negative and short-read handling Jira
• [jira] [Commented] (DIRAPI-455) Uncaught IllegalArgumentException on out-of-range ppolicy error value Jira
• [jira] [Commented] (DIRAPI-446) StartTLS transition accepts plaintext LDAP PDUs injected before handshake Jira
• [jira] [Commented] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [jira] [Created] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Closed] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [PR] Add characterization tests for the LDIF parser (29% -> 70% line coverage) [directory-studio] via GitHub
• [jira] [Created] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Resolved] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Closed] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Updated] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
  • [jira] [Updated] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-473) authenticated flag set before client-side SASL verification completes Jira
• [jira] [Closed] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [jira] [Closed] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-484) Malformed stored credentials crash compareCredentials with unchecked exceptions Jira
• [jira] [Commented] (DIRAPI-474) Deprecated TLSv1 and TLSv1.1 enabled by default for LDAPS/StartTLS Jira
• [jira] [Created] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Closed] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Commented] (DIRAPI-483) Programmatic Ava/Rdn constructors accept structural characters in attribute type Jira
• [jira] [Created] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Resolved] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [PR] Fix SyncRepl parser hang on backslashes, tls_cacertdir parsing and value escaping [directory-studio] via GitHub
  • Re: [PR] Fix SyncRepl parser hang on backslashes, tls_cacertdir parsing and value escaping [directory-studio] via GitHub
  • Re: [PR] Fix SyncRepl parser hang on backslashes and tls_cacertdir parsing [directory-studio] via GitHub
• [jira] [Resolved] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [PR] Run the plugins' JUnit 5 unit tests (surefire discovered none) [directory-studio] via GitHub
• [jira] [Commented] (DIRAPI-442) Unbounded DSML filter nesting causes StackOverflowError during parse Jira
• [ANNOUNCE] Apache LDAP API 2.1.9 released Emmanuel Lecharny
• [jira] [Commented] (DIRAPI-449) Grammar transitions ignore TLV nesting, enabling filter-structure smuggling Jira
• [jira] [Commented] (DIRAPI-465) Schema description escape scan reads past end of line Jira
• [jira] [Commented] (DIRAPI-463) Unrecognized password-scheme prefix silently falls back to plaintext comparison Jira
• [jira] [Commented] (DIRAPI-479) parseQuotedSafeUtf8 called on token instead of spec (SIOOBE Jira
• [jira] [Resolved] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [jira] [Closed] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [jira] [Created] (DIRAPI-494) Only consider a bind as successful when the server returns SUCCESS Jira
• [jira] [Created] (DIRAPI-493) Check the attribute type of an Ava built from the public Rdn constructors Jira
• [jira] [Commented] (DIRAPI-447) LdifAnonymizer emits original DN-valued attributes in change-add entries Jira
• [jira] [Closed] (DIRAPI-492) Restore the pool identity after a SASL bind on a pooled connection - #337 Jira
• [jira] [Commented] (DIRAPI-438) Unbounded filter-nesting recursion causes StackOverflowError at decode time Jira
• [jira] [Closed] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Commented] (DIRAPI-440) Dsmlv2Engine processes batch requests after its bind fails Jira
• [jira] [Created] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Closed] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Commented] (DIRAPI-441) Malformed base64 in DSML document throws uncaught IllegalArgumentException Jira
• [jira] [Commented] (DIRAPI-448) FilterBuilder concatenates attribute names and matching rules unvalidated Jira
• [jira] [Commented] (DIRAPI-445) GSSAPI bind silently replaces JVM-global JAAS and Kerberos configuration Jira
• [jira] [Commented] (DIRAPI-444) EntryCursorImpl.next() spins forever on IntermediateResponse Jira
• [jira] [Commented] (DIRAPI-443) Synchronous simple bind sends unauthenticated bind on empty password Jira
• [jira] [Commented] (DIRAPI-451) Encoder recurses once per filter sibling and per control, stack overflow Jira
• [jira] [Commented] (DIRAPI-453) ACIItem missing itemFirst/userFirst passes check() but NPEs parse() Jira
• [jira] [Commented] (DIRAPI-450) Zero-length control/extended values pass null into factory decodeValue, NPE Jira
• [jira] [Commented] (DIRAPI-452) Unbounded mutual recursion in ACI refinement parsing (StackOverflowError) Jira
• [jira] [Commented] (DIRAPI-457) Java deserialization of server-controlled extended-response payload Jira
• [jira] [Commented] (DIRAPI-458) FilterEncoder passes attacker hex escapes through unencoded Jira
• [jira] [Commented] (DIRAPI-462) Rdn.hashCode() always returns 0 due to variable shadowing Jira
• [jira] [Commented] (DIRAPI-459) FilterParser recurses without depth limit; StackOverflowError on nested filters Jira
• [jira] [Commented] (DIRAPI-461) Rdn.unescapeValue mis-decodes specials and silently drops invalid escapes Jira
• [jira] [Commented] (DIRAPI-467) Strings.toLowerCase(byte[]) crashes on non-ASCII attribute id from network Jira
• [jira] [Commented] (DIRAPI-466) Telephone-number syntax regex has catastrophic exponential backtracking Jira
• [jira] [Commented] (DIRAPI-469) BER indefinite-length octet 0x80 silently decoded as zero length Jira
• [jira] [Commented] (DIRAPI-468) Oid.fromBytes crashes and misdecodes multi-byte OID arcs Jira
• [jira] [Commented] (DIRAPI-472) Pooled connections keep previous borrower's bind identity with default factory Jira
• [jira] [Commented] (DIRAPI-476) Extended request value unconditionally cast to OpaqueExtendedRequest Jira
• [jira] [Commented] (DIRAPI-475) StartTLS detection tests hasControl() instead of the request OID Jira
• [jira] [Commented] (DIRAPI-471) TLV.getSize() integer overflow bypasses parent length-containment check Jira
• [jira] [Commented] (DIRAPI-470) 5-byte BER INTEGER in [2^31,2^32) silently wraps negative Jira
• [jira] [Commented] (DIRAPI-478) PasswordModifyResponse toString prints generated password in clear Jira
• [jira] [Commented] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Commented] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira
• [jira] [Commented] (DIRAPI-482) Schema-aware LDIF parse silently drops attributes that fail validation Jira
• [jira] [Commented] (DIRAPI-480) TriggerUtils builds DNs by string concatenation without escaping Jira
• [jira] [Commented] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [jira] [Commented] (DIRAPI-486) GeneralizedTime accepts arbitrary trailing garbage after fractional part Jira
• [jira] [Commented] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Commented] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Commented] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Commented] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Resolved] (DIRAPI-491) Don't mask chars above the case tables in Strings upper/lower case methods Jira
• [jira] [Closed] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Resolved] (DIRAPI-490) Never let an unchecked exception escape the OpenLdapSchemaParser - #335 Jira
• [jira] [Closed] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Resolved] (DIRAPI-489) Reject trailing chars after a numeric OID matching rule in FilterBuilder Jira
• [jira] [Resolved] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Created] (DIRAPI-488) Serialize.deserializeInt sign-extends bytes, corrupting stored lengths Jira
• [jira] [Created] (DIRAPI-487) parseOid/parseDescr index past end of input (SIOOBE) Jira
• [jira] [Resolved] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Created] (DIRAPI-485) Subtree refinement parser recurses without depth limit Jira
• [jira] [Closed] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira
• [jira] [Resolved] (DIRAPI-481) Multi-wildcard substring filters compile to super-linearly backtracking regex Jira

• Earlier messages