We have just released version 7.0.5 of the UnboundID LDAP SDK for Java. It is available for download from GitHub and SourceForge, and it is available in the Maven Central Repository. You can find the release notes for this release (and all previous versions) at https://docs.ldap.com/ldap-sdk/docs/release-notes.html, but here’s a summary of the changes:
-
We have updated the persistence framework to provide improved security validation when using Java serialization for certain fields. In general, we don’t recommend the use of Java serialization in the persistence framework, since there are security concerns, and since the persisted objects can only be used by Java applications. If you wish to store an object in an LDAP server that has fields of types that aren’t supported by the out-of-the-box persistence framework, we recommend creating a custom
ObjectEncoderto handle the conversion to and from LDAP attributes. -
We updated the usage information for the
ldapdeletetool to include a--searchBaseDNargument that was mentioned in the description but omitted from the set of sample arguments. -
We updated the documentation to include the latest revisions of a number of LDAP-related specifications, including draft-bouchez-scram-mcf, draft-codere-ldapsyntax, draft-kaliski-asn1-layman-guide, draft-ietf-kitten-password-storage, draft-ietf-kitten-sasl-ht, draft-khan-ldap-bind-return-dn, and draft-sabadello-did-challenge-sasl.