OpenDJ 4.10.0 Released

Download

What’s new

• Added support for LDAP transactions as per RFC 5805 to improve atomicity and data consistency.
• Updated core dependencies including RxJava 3.x, BouncyCastle FIPS 2.1.x, and OpenIdentityPlatform Commons 2.4.0 for enhanced stability and security.
• Improved OSGi bundle handling by excluding conflicting packages such as BouncyCastle and RxJava3 imports.
• Migrated deployment from OSSRH to Central Portal to streamline release management.

Fixed bugs

• Patched security vulnerability CVE-2025-49146 preventing fallback to insecure authentication with channelBinding=require.
• Fixed makeldif templates by adding missing objectClass attribute to baseDN to improve import/export reliability.

Full changeset (more details)

Thanks for the contributions

1. Valery Kharseko

2. Maxim Thomas

3. Prashant