●Change8

26.0.8

📦 keycloakView on GitHub →
✨ 2 features🐛 24 fixes

Summary

This release introduces enhancements like showing User Events on a dedicated tab and supporting autocomplete on the Username Form. It also resolves numerous bugs across various components, including database migrations, UI issues, and security vulnerabilities (CVEs).

Migration Steps

  1. Refer to the migration guide for a complete list of changes: file:/home/runner/work/keycloak-rel/keycloak-rel/target/web/docs/latest/upgrading/index.html#migration-changes

✨ New Features

  • Show User Events on dedicated tab on Client-/User-Details
  • Username Form should support autocomplete in login/ui

🐛 Bug Fixes

  • The Realm Selection Dropdown Breaks After 50 Realms In Database in admin/ui
  • Logout with client_id and/or post_logout_redirect_uri results in bad request on logout confirmation page in oidc
  • Getting "Forbidden, permission needed: query-clients" as temp-admin in admin/ui
  • Keys tab showing disabled and inactive keys as active in admin/ui
  • MySQL database migration issue in core
  • Filter events by user id and client not working in admin/ui
  • organizationEnabled and verifiableCredentialsEnabled attributes are present as attributes in an export
  • Edit Help Mode descriptor for Roles in policy form in admin/ui
  • Database migration fails after upgrading operator to v26.0.6 in core
  • Token issuer is null in executeActionsEmail and sendVerifyEmail if no clientId is passed in admin/api
  • Strange Random behavior - Intermittent missing organization claim in Keycloak JWT token in organizations
  • SAML Adapter Galleon Pack for EAP8 cannot use new metadata options for layers in adapter/saml
  • Mis-formatted definition list of hashing algorithms
  • Showing LDAP error message when failing to reset password in ldap
  • Delete user confirm title is wrong in admin/ui
  • Events: Wrong text for user id search in admin/ui
  • RH-SSO EAP adapters remote saml tests in ci
  • Initial keycloak bootstrap suggestion is not correct in dist/quarkus
  • Upgrading guide 26.0.6 is missing in the built document in docs
  • Temporary password toggle in set password dialog is cut off in admin-console in admin/ui
  • New install doesn't allow admin user creation in dist/quarkus
  • Exact searches should be the default when querying user by attributes in admin/api
  • CVE-2024-11736 Unrestricted admin use of system and environment variables
  • CVE-2024-11734 Denial of Service in Keycloak Server via Security Headers