Page History

...

• CXF 4.1.5 → 4.1.6
• Spring Boot 3.5.13 → 3.5.14
• Spring Cloud Gateway 4.3.3 → 4.3.4
• Apereo CAS 7.3.5 → 7.3.7
• Apereo CAS Client 4.0.4 → 4.1.1
• OpenSAML 5.1.1 → 5.2.2

...

Security

• CVE-2026-42797

• CVE-2026-42782

• Apereo CAS Client JWT Vulnerability
• OpenSAML vulnerability

Changelog

Bug

• [SYNCOPE-1744] - Empty value in template when notification is sent on DELETE event
• [SYNCOPE-1921] - LDAPMembershipPropagationActions deletes memberships of groups not managed by Syncope
• [SYNCOPE-1959] - Error while editing group relationships in admin console
• [SYNCOPE-1960] - Cannot remove aux class from user, group or any object
• [SYNCOPE-1962] - Error during database upgrade procedure on Oracle 23
• [SYNCOPE-1963] - Error while searching for user or group manager not null or null on user, group and any objects
• [SYNCOPE-1965] - Manager is going to be removed after pull

...

Planning the upgrade of an existing Apache Syncope 4.0 deployment to Syncope 4.1 can be achieved by following the indications in the Reference Guide.

Issues

Bug

• [SYNCOPE-1945] - Tasks result not visible until the refresh is triggered
• [SYNCOPE-1956] - Dropdown multivalue PlainAttr not updated via Console
• [SYNCOPE-1957] - Wrong validation triggered while updating users, groups or any objects after auxiliary class change

...

First milestone release for the new major series Syncope 4.1 Capriccio.

Issues

Bug

• [SYNCOPE-1873] - LocalDateTime fields not properly handled in BeanPanel
• [SYNCOPE-1875] - SAML delegated authentication: metadata keeps getting re-generated
• [SYNCOPE-1878] - Priority propagation failing with NOT_ATTEMPTED
• [SYNCOPE-1879] - Serialization error while auditing Pull data
• [SYNCOPE-1881] - WA: SP Metadata not fetched from Core
• [SYNCOPE-1882] - Multivalue dropdown attributes show additional empty selectable value
• [SYNCOPE-1883] - Google MFA authentication does not validate scratch codes
• [SYNCOPE-1884] - Errors with Encrypted plain values
• [SYNCOPE-1888] - Console: change required property for specific inputs in policy configuration
• [SYNCOPE-1890] - Configure max retry attempts for login with Syncope authentication module on WA
• [SYNCOPE-1891] - Missing mapped attribute setting for SAML2IdPAuthModuleConf
• [SYNCOPE-1894] - Mapping parsing error while schema contains a dot
• [SYNCOPE-1895] - Console CSV export does not consider search filter
• [SYNCOPE-1896] - Audit: not serializable exception for ConnectorObject and Any instances
• [SYNCOPE-1899] - Console: code editor does not persist changes
• [SYNCOPE-1902] - Can't set Unauthorized Redirect URL in access policy via Console
• [SYNCOPE-1904] - Console: cannot edit authentication.attributes under Keymaster > Parameters
• [SYNCOPE-1905] - Error while pulling a specific group (single pull) from resource
• [SYNCOPE-1906] - Wrong result order if sorting by plain attribute
• [SYNCOPE-1910] - Tasks and Reports executed nevertheless inactive
• [SYNCOPE-1911] - Case sensisitve search failing with Elasticsearch or OpenSearch
• [SYNCOPE-1912] - Linked account password is not propagated on update
• [SYNCOPE-1913] - Missing dependency to resolve inline Groovy in Syncope WA
• [SYNCOPE-1915] - Failure when running the Persistence Storage Upgrader against Oracle DBMS
• [SYNCOPE-1919] - Notification Job occasionally stuck
• [SYNCOPE-1920] - Error in search panel while trying to add a condition after an attribute of type Long
• [SYNCOPE-1922] - Disallow searches by encrypted attribute
• [SYNCOPE-1924] - Bug in retainAll, removeAll, and removeIf methods of PropagationByResource
• [SYNCOPE-1925] - Contextual menu stays open after modal window is closed
• [SYNCOPE-1928] - Session timeout not working for Console
• [SYNCOPE-1933] - Console: only first dynamic group is shown
• [SYNCOPE-1936] - WA: only SIGNATURE and CURRENT keys generated for OIDC
• [SYNCOPE-1937] - User password history length is not correctly trimmed
• [SYNCOPE-1942] - Menu localization doesn't work properly on admin console
• [SYNCOPE-1943] - French Canadian GUI failed with Groups contextual menu
• [SYNCOPE-1944] - Membership derived attributes are not computed from membership plain attributes

...