openSUSE-SU-2025:0152-1

This update for kanidm fixes the following issues:

• Update to version 1.6.2~git0.a20663ea8:

  • Release 1.6.2
  • fix: clippy
  • maint: typo in log message
  • Set kid manually to prevent divergence
  • Order keys in application JWKS / Fix rotation bug
  • Fix toml issues with strings

• Update to version 1.6.1~git0.2e4429eca:

  • Release 1.6.1
  • Resolve reload of oauth2 on startup (#3604)

• CVE-2025-3416: Fixed openssl use after free (boo#1242642)

• Update to version 1.6.0~git0.d7ae0f336:

  • Release 1.6.0
  • Avoid openssl for md4
  • Fixes #3586, inverts the navbar button color (#3593)
  • Release 1.6.0-pre
  • chore: Release Notes (#3588)
  • Do not require instances to exist during optional config load (#3591)
  • Fix std::fmt::Display for some objects (#3587)
  • Drop fernet in favour of JWE (#3577)
  • docs: document how to configure oauth2 for opkssh (#3566)
  • Add kanidmsshauthorizedkeys_direct to client deb (#3585)
  • Bump the all group in /pykanidm with 2 updates (#3581)
  • Update dependencies, fix a bunch of clippy lints (#3576)
  • Support spaces in ssh key comments (#3575)
  • 20250402 3423 proxy protocol (#3542)
  • fix(web): Preserve SSH key content on form validation error (#3574)
  • Bump the all group in /pykanidm with 3 updates (#3572)
  • Bump the all group in /pykanidm with 2 updates (#3564)
  • Bump crossbeam-channel from 0.5.14 to 0.5.15 in the cargo group (#3560)
  • Improve token handling (#3553)
  • Bump tokio from 1.44.1 to 1.44.2 in the cargo group (#3549)
  • Update fs4 and improve klock handling (#3551)
  • Less footguns (#3552)
  • Unify unix config parser (#3533)
  • Bump openssl from 0.10.71 to 0.10.72 in the cargo group (#3544)
  • Bump the all group in /pykanidm with 8 updates (#3547)
  • implement notify-reload protocol (#3540)
  • Allow versioning of server configs (#3515)
  • 20250314 remove protected plugin (#3504)
  • Bump the all group with 10 updates (#3539)
  • Bump mozilla-actions/sccache-action from 0.0.8 to 0.0.9 in the all group (#3538)
  • Bump the all group in /pykanidm with 4 updates (#3537)
  • Add maxbersize to freeipa sync (#3530)
  • Bump the all group in /pykanidm with 5 updates (#3524)
  • Update Concread
  • Update developer_ethics.md (#3520)
  • Update examples.md (#3519)
  • Make schema indexing a boolean instead of index types (#3517)
  • Add missing lld dependency and fix syntax typo (#3490)
  • Update shell.nix to work with stable nixpkgs (#3514)
  • Improve unixd tasks channel comments (#3510)
  • Update kanidmppaautomation reference to latest (#3512)
  • Add set-description to group tooling (#3511)
  • packaging: Add kanidmd deb package, update documentation (#3506)
  • Bump the all group in /pykanidm with 5 updates (#3508)
  • 20250313 unixd system cache (#3501)
  • Support rfc2307 memberUid in sync operations. (#3466)
  • Bump mozilla-actions/sccache-action from 0.0.7 to 0.0.8 in the all group (#3496)
  • Update Traefik config example to remove invalid label (#3500)
  • Add uid/gid allocation table (#3498)
  • 20250225 ldap testing in testkit (#3460)
  • Bump the all group in /pykanidm with 5 updates (#3494)
  • Bump ring from 0.17.10 to 0.17.13 in the cargo group (#3491)
  • Handle form-post as a response mode (#3467)
  • book: fix english (#3487)
  • Correct paths with Kanidm Tools Container (#3486)
  • 20250225 improve test performance (#3459)
  • Bump the all group in /pykanidm with 8 updates (#3484)
  • Use lld by default on linux (#3477)
  • 20250213 patch used wrong acp (#3432)
  • Android support (#3475)
  • Changed all CI/CD builds to locked (#3471)
  • Make it a bit clearer that providers are needed (#3468)
  • Fix incorrect credential generation in radius docs (#3465)
  • Add crypt formats for password import (#3458)
  • build: Create daemon image from scratch (#3452)
  • address webfinger doc feedbacks (#3446)
  • Bump the all group across 1 directory with 5 updates (#3453)
  • [htmx] Admin ui for groups and users management (#3019)
  • Fixes #3406: add configurable maximum queryable attributes for LDAP (#3431)
  • Accept invalid certs and fix tokencachepath (#3439)
  • Accept lowercase ldap pwd hashes (#3444)
  • TOTP label verification (#3419)
  • Rewrite WebFinger docs (#3443)
  • doc: fix formatting of URL table, remove Caddyfile instructions (#3442)
  • book: add OAuth2 Proxy example (#3434)
  • Exempt idm_admin and admin from denied names. (#3429)
  • Book fixes (#3433)
  • ci: uniform Docker builds (#3430)
  • 20240213 3413 domain displayname (#3425)
  • Correct path to kanidm config example in documentation. (#3424)
  • Support redirect uris with query parameters (#3422)
  • Update to 1.6.0-dev (#3418)
  • Remove white background from square logo. (#3417)
  • feat: Added webfinger implementation (#3410)
  • Bump the all group in /pykanidm with 7 updates (#3412)

• Update to version 1.5.0~git2.21c2a1bd0:

  • fix: documentation fail (#3555)