From 4296ee5f85b127dbb1d92b67a4e12e96bf30c6f2 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 22 Nov 2024 05:52:35 +0000 Subject: [PATCH] Keycloak 26.0.6 release --- cache/releases/26.0.6/changelog.json | 274 ++++++++++++++++++++ cache/releases/26.0.6/gh-release-notes.html | 70 +++++ cache/releases/26.0.6/release-notes.html | 16 ++ pom.xml | 2 +- versions/26.0.6.json | 7 + 5 files changed, 368 insertions(+), 1 deletion(-) create mode 100644 cache/releases/26.0.6/changelog.json create mode 100644 cache/releases/26.0.6/gh-release-notes.html create mode 100644 cache/releases/26.0.6/release-notes.html create mode 100644 versions/26.0.6.json diff --git a/cache/releases/26.0.6/changelog.json b/cache/releases/26.0.6/changelog.json new file mode 100644 index 00000000..7fe2879c --- /dev/null +++ b/cache/releases/26.0.6/changelog.json @@ -0,0 +1,274 @@ +[ { + "number" : 609, + "repository" : "keycloak-quickstarts", + "title" : "Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement", + "kind" : "bug", + "area" : null, + "url" : "https://github.com/keycloak/keycloak-quickstarts/issues/609" +}, { + "number" : 11008, + "repository" : "keycloak", + "title" : "Incorrect get the members of a group imported from LDAP", + "kind" : "bug", + "area" : "ldap", + "url" : "https://github.com/keycloak/keycloak/issues/11008" +}, { + "number" : 17593, + "repository" : "keycloak", + "title" : "Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used ", + "kind" : "bug", + "area" : "ldap", + "url" : "https://github.com/keycloak/keycloak/issues/17593" +}, { + "number" : 19652, + "repository" : "keycloak", + "title" : "Members are inhereted from LDAP group with the same name", + "kind" : "bug", + "area" : "ldap", + "url" : "https://github.com/keycloak/keycloak/issues/19652" +}, { + "number" : 23732, + "repository" : "keycloak", + "title" : "JavascriptAdapterTest errors when running with strict cookies on Firefox", + "kind" : "bug", + "area" : "ci", + "url" : "https://github.com/keycloak/keycloak/issues/23732" +}, { + "number" : 27856, + "repository" : "keycloak", + "title" : "Social login - Stack Overflow test fails", + "kind" : "bug", + "area" : "ci", + "url" : "https://github.com/keycloak/keycloak/issues/27856" +}, { + "number" : 31456, + "repository" : "keycloak", + "title" : "Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI", + "kind" : "bug", + "area" : "ldap", + "url" : "https://github.com/keycloak/keycloak/issues/31456" +}, { + "number" : 32651, + "repository" : "keycloak", + "title" : "Mark slf4j-api as not optional for the 24 release", + "kind" : "task", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/32651" +}, { + "number" : 32786, + "repository" : "keycloak", + "title" : "Organization Domain not marked as a required field in the Admin UI", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/32786" +}, { + "number" : 33531, + "repository" : "keycloak", + "title" : "Previously entered translations should persist in the translation dialog for the attribute groups", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/33531" +}, { + "number" : 34013, + "repository" : "keycloak", + "title" : "Add More Info to Organization Events", + "kind" : "bug", + "area" : "organizations", + "url" : "https://github.com/keycloak/keycloak/issues/34013" +}, { + "number" : 34065, + "repository" : "keycloak", + "title" : "Users without `view-realm` can't see user lockout state in Admin UI ", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/34065" +}, { + "number" : 34201, + "repository" : "keycloak", + "title" : "OIDC IdP Unable to validate signatures using validatingPublicKey certificate", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/34201" +}, { + "number" : 34315, + "repository" : "keycloak", + "title" : "Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes", + "kind" : "enhancement", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/34315" +}, { + "number" : 34335, + "repository" : "keycloak", + "title" : "NPE in Organization(s)Resource when using Quarkus Rest Client", + "kind" : "bug", + "area" : "admin/api", + "url" : "https://github.com/keycloak/keycloak/issues/34335" +}, { + "number" : 34386, + "repository" : "keycloak", + "title" : "Some dynamic imported functions are also statically imported making bundling them in-efficient", + "kind" : "enhancement", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/34386" +}, { + "number" : 34401, + "repository" : "keycloak", + "title" : "Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API", + "kind" : "bug", + "area" : "admin/api", + "url" : "https://github.com/keycloak/keycloak/issues/34401" +}, { + "number" : 34465, + "repository" : "keycloak", + "title" : "Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/34465" +}, { + "number" : 34519, + "repository" : "keycloak", + "title" : "Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/34519" +}, { + "number" : 34549, + "repository" : "keycloak", + "title" : "Quarkus dev mode does not work", + "kind" : "bug", + "area" : "dist/quarkus", + "url" : "https://github.com/keycloak/keycloak/issues/34549" +}, { + "number" : 34570, + "repository" : "keycloak", + "title" : "Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC", + "kind" : "enhancement", + "area" : "docs", + "url" : "https://github.com/keycloak/keycloak/issues/34570" +}, { + "number" : 34572, + "repository" : "keycloak", + "title" : "Text in \"Choose a policy type\" is not wrapping", + "kind" : "bug", + "area" : "admin/ui", + "url" : "https://github.com/keycloak/keycloak/issues/34572" +}, { + "number" : 34603, + "repository" : "keycloak", + "title" : "NPE in InfinispanOrganizationProvider if userCache is disabled", + "kind" : "bug", + "area" : "infinispan", + "url" : "https://github.com/keycloak/keycloak/issues/34603" +}, { + "number" : 34624, + "repository" : "keycloak", + "title" : "Securing apps guide breaks downstream", + "kind" : "bug", + "area" : "docs", + "url" : "https://github.com/keycloak/keycloak/issues/34624" +}, { + "number" : 34634, + "repository" : "keycloak", + "title" : "Missing downstream explicit name for anchors", + "kind" : "bug", + "area" : "docs", + "url" : "https://github.com/keycloak/keycloak/issues/34634" +}, { + "number" : 34644, + "repository" : "keycloak", + "title" : "KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored", + "kind" : "bug", + "area" : "infinispan", + "url" : "https://github.com/keycloak/keycloak/issues/34644" +}, { + "number" : 34655, + "repository" : "keycloak", + "title" : "Use weekly cache for PNPM store", + "kind" : "task", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/34655" +}, { + "number" : 34671, + "repository" : "keycloak", + "title" : "`ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy", + "kind" : "bug", + "area" : "core", + "url" : "https://github.com/keycloak/keycloak/issues/34671" +}, { + "number" : 34681, + "repository" : "keycloak", + "title" : "[Testsuite CI] Surefire Reports - support release 26.0", + "kind" : "task", + "area" : "testsuite", + "url" : "https://github.com/keycloak/keycloak/issues/34681" +}, { + "number" : 34687, + "repository" : "keycloak", + "title" : "New credential templates broken in KC26", + "kind" : "bug", + "area" : "login/ui", + "url" : "https://github.com/keycloak/keycloak/issues/34687" +}, { + "number" : 34855, + "repository" : "keycloak", + "title" : "Add conditional text to Installation Locations", + "kind" : "enhancement", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/34855" +}, { + "number" : 34873, + "repository" : "keycloak", + "title" : "Update Leveraging JaKarta EE in Server Development guide", + "kind" : "enhancement", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/34873" +}, { + "number" : 34887, + "repository" : "keycloak", + "title" : "Apply QE edits to High Availability guide", + "kind" : "enhancement", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/34887" +}, { + "number" : 34905, + "repository" : "keycloak", + "title" : "[Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT", + "kind" : "bug", + "area" : "ci", + "url" : "https://github.com/keycloak/keycloak/issues/34905" +}, { + "number" : 35213, + "repository" : "keycloak", + "title" : "CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process", + "kind" : "bug", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/35213" +}, { + "number" : 35214, + "repository" : "keycloak", + "title" : "CVE-2024-10270 Potential Denial of Service", + "kind" : "bug", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/35214" +}, { + "number" : 35215, + "repository" : "keycloak", + "title" : "CVE-2024-10492 Keycloak path trasversal", + "kind" : "bug", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/35215" +}, { + "number" : 35216, + "repository" : "keycloak", + "title" : "CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability", + "kind" : "bug", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/35216" +}, { + "number" : 35217, + "repository" : "keycloak", + "title" : "CVE-2024-10039 Bypassing mTLS validation", + "kind" : "bug", + "area" : null, + "url" : "https://github.com/keycloak/keycloak/issues/35217" +} ] \ No newline at end of file diff --git a/cache/releases/26.0.6/gh-release-notes.html b/cache/releases/26.0.6/gh-release-notes.html new file mode 100644 index 00000000..69dc6dab --- /dev/null +++ b/cache/releases/26.0.6/gh-release-notes.html @@ -0,0 +1,70 @@ +
+

Highlights

+
+

Admin events might include now additional details about the context when the event is fired

+
+

In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should +expect the database schema being updated to add a new column DETAILS_JSON to the ADMIN_EVENT_ENTITY table.

+
+
+
+

Updates to documentation of X.509 client certificate lookup via proxy

+
+

Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy. +Additional configuration steps might be required depending on your current configuration. Make sure to review the updated +reverse proxy guide if you have configured +the client certificate lookup via a proxy header.

+
+
+

Upgrading

+

Before upgrading refer to the migration guide for a complete list of changes.

+ +

All resolved issues

+ + + +

Enhancements

+ + +

Bugs

+ + +
\ No newline at end of file diff --git a/cache/releases/26.0.6/release-notes.html b/cache/releases/26.0.6/release-notes.html new file mode 100644 index 00000000..e8d8fe57 --- /dev/null +++ b/cache/releases/26.0.6/release-notes.html @@ -0,0 +1,16 @@ +
+

Admin events might include now additional details about the context when the event is fired

+
+

In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should +expect the database schema being updated to add a new column DETAILS_JSON to the ADMIN_EVENT_ENTITY table.

+
+
+
+

Updates to documentation of X.509 client certificate lookup via proxy

+
+

Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy. +Additional configuration steps might be required depending on your current configuration. Make sure to review the updated +reverse proxy guide if you have configured +the client certificate lookup via a proxy header.

+
+
\ No newline at end of file diff --git a/pom.xml b/pom.xml index 5ff180eb..0293c6e9 100644 --- a/pom.xml +++ b/pom.xml @@ -20,7 +20,7 @@ 2.14.0 1.26.0 - 26.0.5 + 26.0.6 26.0.3 1.12.1 diff --git a/versions/26.0.6.json b/versions/26.0.6.json new file mode 100644 index 00000000..f6de1576 --- /dev/null +++ b/versions/26.0.6.json @@ -0,0 +1,7 @@ +{ + "date": "2024-11-22", + "version": "26.0.6", + "blogTemplate": 3, + "documentationTemplate": 12, + "downloadTemplate": 24 +}