Debian/apache-directory-api: high 8.5
It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate
Action: Upgrade apache-directory-api to 2.1.9-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.9-1 | - |
Fixed versions
| 2.1.9-1 |
Sources
- osv: DEBIAN-CVE-2026-35563#Debian:14/apache-directory-api
- https://security-tracker.debian.org/tracker/CVE-2026-35563
published · modified · JSON