Release commit for v1.5.21 (#505)

Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>

Author: bestbeforetoday

Makefile

@@ -32,7 +32,7 @@ PROJECT_NAME = fabric-ca
 GO_VER ?= $(shell go list -m toolchain | cut -c13-)
 UBUNTU_VER ?= 22.04
 DEBIAN_VER ?= stretch
-BASE_VERSION ?= v1.5.20
+BASE_VERSION ?= v1.5.21
 
 ARCH=$(shell go env GOARCH)
 PLATFORM=$(shell go env GOOS)-$(shell go env GOARCH)

lib/metadata/version.go

@@ -29,7 +29,7 @@ const (
 
 // Version specifies fabric-ca-client/fabric-ca-server version
 // It is defined by the Makefile and passed in with ldflags
-var Version = "1.5.20"
+var Version = "1.5.21"
 
 // GetVersionInfo returns version information for the fabric-ca-client/fabric-ca-server
 func GetVersionInfo(prgName string) string {

release_notes/v1.5.21.md

@@ -0,0 +1,22 @@
+v1.5.21 Release Notes - June 3, 2026
+========================================
+
+v1.5.21 updates the Go version and dependencies to address the following
+security vulnerabilities:
+
+- CVE-2026-39821
+- CVE-2026-27145
+- CVE-2026-42507
+
+This release also adds escaping of special characters in LDAP user name
+lookups.
+
+Dependencies
+------------
+
+Fabric CA v1.5.21 has been tested with the following dependencies:
+- Go 1.26.4
+- Ubuntu 22.04 (for Docker images)
+- Databases
+    - PostgreSQL 17
+    - MariaDB 11