You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [PR] Bump github/codeql-action from 4.37.8 to 4.37.9 [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/01 06:27:36 UTC, 2 replies.
- Re: [PR] Bump io.zonky.test.postgres:embedded-postgres-binaries-bom from 18.4.0 to 18.6.0 [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/01 06:27:40 UTC, 2 replies.
- Re: [PR] Bump org.jsoup:jsoup from 1.23.1 to 1.23.2 [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/01 06:27:47 UTC, 2 replies.
- [jira] [Created] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/01 09:58:00 UTC, 0 replies.
- [jira] [Assigned] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/01 09:59:00 UTC, 0 replies.
- [jira] [Assigned] (SYNCOPE-1718) Consider Flowable replacement - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/01 09:59:00 UTC, 1 replies.
- [PR] [SYNCOPE-1993] provide support for enable auto registration parameter also in core module [syncope] - posted by "andrea-patricelli (via GitHub)" <gi...@apache.org> on 2026/09/01 10:45:54 UTC, 3 replies.
- [jira] [Commented] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/01 11:44:00 UTC, 2 replies.
- [jira] [Resolved] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/01 12:29:00 UTC, 0 replies.
- [PR] Bump org.glassfish:jakarta.faces from 4.1.14 to 4.1.15 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 22:38:53 UTC, 1 replies.
- [jira] [Created] (SYNCOPE-1994) Provide entity versioning support by adding JaVers integration - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/02 09:52:00 UTC, 0 replies.
- [PR] [SYNCOPE-1968] Map each SRA and WA instance to a single Domain [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/02 13:38:47 UTC, 1 replies.
- [jira] [Updated] (SYNCOPE-1994) Provide entity versioning support by adding JaVers integration - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/02 13:43:00 UTC, 0 replies.
- [jira] [Assigned] (SYNCOPE-1994) Provide entity versioning support by adding JaVers integration - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/02 13:44:00 UTC, 0 replies.
- [jira] [Updated] (SYNCOPE-1968) Support multitenancy for WA and SRA - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/02 13:45:00 UTC, 1 replies.
- [jira] [Updated] (SYNCOPE-1968) WA: support CAS multitenancy - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/02 13:45:00 UTC, 0 replies.
- [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 22:34:45 UTC, 3 replies.
- [jira] [Created] (SYNCOPE-1995) Console is throwing exception on pages with websockets enabled - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/03 15:28:00 UTC, 0 replies.
- [jira] [Updated] (SYNCOPE-1995) Console is throwing exception on slow pages with websockets enabled - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/03 15:29:00 UTC, 0 replies.
- [jira] [Updated] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled - posted by "Andrea Patricelli (Jira)" <ji...@apache.org> on 2026/09/03 15:29:00 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/03 22:33:32 UTC, 3 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/03 22:39:29 UTC, 3 replies.
- [jira] [Commented] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/04 12:06:00 UTC, 3 replies.
- [PR] Bump io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 22:32:41 UTC, 3 replies.
- [PR] Bump co.elastic.clients:elasticsearch-java from 9.5.2 to 9.5.3 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 22:39:56 UTC, 3 replies.
- [PR] Upgrading maven-surefire-plugin and maven-failsafe-plugin [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/07 12:08:20 UTC, 3 replies.
- [PR] Bump wicket-bootstrap.version from 7.0.14 to 7.0.15 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 22:35:21 UTC, 3 replies.
- [PR] Bump pac4j.version from 6.5.6 to 6.5.7 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 22:36:07 UTC, 3 replies.
- [PR] Bump net.bytebuddy:byte-buddy-agent from 1.17.8 to 1.18.13 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 22:37:45 UTC, 2 replies.
- [jira] [Created] (SYNCOPE-1996) Security production mode - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/08 11:00:00 UTC, 0 replies.
- [jira] [Commented] (SYNCOPE-1996) Security production mode - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/08 12:41:00 UTC, 9 replies.
- [PR] Bump org.glassfish:jakarta.faces from 4.1.15 to 4.1.16 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 22:37:33 UTC, 3 replies.
- [jira] [Resolved] (SYNCOPE-1996) Security production mode - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/09 07:43:00 UTC, 0 replies.
- [PR] Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/10 22:33:03 UTC, 3 replies.
- [PR] Bump pac4j.version from 6.5.7 to 6.5.8 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/10 22:36:37 UTC, 3 replies.
- [VOTE] Apache Syncope 4.1.3 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/11 06:50:21 UTC, 5 replies.
- [jira] [Created] (SYNCOPE-1997) Incorrect resource connectivity check with credential override - posted by "Matteo Tatoni (Jira)" <ji...@apache.org> on 2026/09/11 07:29:00 UTC, 0 replies.
- [PR] [SYNCOPE-1997] - Fix connectivity check and improve topology UI to prevent scrolling [syncope] - posted by "TatoniMatteo (via GitHub)" <gi...@apache.org> on 2026/09/11 07:34:37 UTC, 1 replies.
- [VOTE] Apache Syncope 4.0.8 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/11 07:41:45 UTC, 4 replies.
- [PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.2.2 to 4.2.3 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/11 22:39:52 UTC, 3 replies.
- [PR] hide timestamp in generated OpenAPI code [syncope] - posted by "hboutemy (via GitHub)" <gi...@apache.org> on 2026/09/12 06:45:18 UTC, 1 replies.
- [jira] [Commented] (SYNCOPE-1997) Incorrect resource connectivity check with credential override - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/14 06:23:00 UTC, 2 replies.
- [jira] [Resolved] (SYNCOPE-1997) Incorrect resource connectivity check with credential override - posted by "Matteo Tatoni (Jira)" <ji...@apache.org> on 2026/09/14 06:31:00 UTC, 0 replies.
- [RESULT] [VOTE] Apache Syncope 4.1.3 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 07:51:20 UTC, 0 replies.
- [RESULT] [VOTE] Apache Syncope 4.0.8 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 07:52:15 UTC, 0 replies.
- [ANN] Apache Syncope 4.1.3 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:12:46 UTC, 0 replies.
- [ANN] Apache Syncope 4.0.8 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:14:19 UTC, 0 replies.
- CVE-2026-73191: Apache Syncope: CAS service URL injection via Forwarded HTTP headers - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:15:40 UTC, 0 replies.
- CVE-2026-73195: Apache Syncope: CSV export spreadsheet formula injection - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:17:26 UTC, 0 replies.
- CVE-2026-73236: Apache Syncope: Cross-Realm authorization bypass in delegated administration - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:18:24 UTC, 0 replies.
- CVE-2026-73370: Apache Syncope: Cross-Realm boundaries reconciliation bypass - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:19:36 UTC, 0 replies.
- CVE-2026-73178: Apache Syncope: JWT Access Token takeover - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:21:44 UTC, 0 replies.
- CVE-2026-73470: Apache Syncope: Delegating users can grant unowned Roles - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:24:01 UTC, 0 replies.
- CVE-2026-73579: Apache Syncope: Non-recursive Any search could skip Realms restrictions - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:24:47 UTC, 0 replies.
- CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:26:47 UTC, 0 replies.
- CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:27:52 UTC, 0 replies.
- CVE-2026-75030: Apache Syncope: Incomplete authorization checks for Group members deprovisioning - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:28:39 UTC, 0 replies.
- CVE-2026-77051: Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:29:30 UTC, 0 replies.
- CVE-2026-77147: Apache Syncope: Groovy Sandbox escape for empty CommandArgs - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:30:24 UTC, 0 replies.
- CVE-2026-77181: Apache Syncope: ClientApp update entitlement not effective - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:38:47 UTC, 0 replies.
- CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:41:05 UTC, 0 replies.
- CVE-2026-78318: Apache Syncope: Unauthenticated reflected XSS in Console and Enduser - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:42:00 UTC, 0 replies.
- CVE-2026-78330: Apache Syncope: Privilege escalation for admin user via JWT authentication - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:43:01 UTC, 0 replies.
- CVE-2026-78336: Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:44:22 UTC, 0 replies.
- CVE-2026-82232: Apache Syncope: SQL injection via sort parameter in Task search - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:45:57 UTC, 0 replies.
- CVE-2026-86460: Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:46:32 UTC, 0 replies.
- CVE-2026-87779: Apache Syncope: AES Secret Key disclosure via log output - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:47:17 UTC, 0 replies.
- CVE-2026-87785: Apache Syncope: JWT subject spoofing - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:47:50 UTC, 0 replies.
- CVE-2026-87802: Apache Syncope: SRA OAuth2 JWT signature verification bypass - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/09/14 08:49:11 UTC, 0 replies.
- [jira] [Updated] (SYNCOPE-1997) Incorrect resource connectivity check with credential override - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/14 13:07:00 UTC, 0 replies.
- [PR] Bump org.apache.zookeeper:zookeeper from 3.9.5 to 3.9.6 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:33:31 UTC, 2 replies.
- [PR] Bump github/codeql-action from 4.37.9 to 4.38.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:34:10 UTC, 3 replies.
- [PR] Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:34:47 UTC, 3 replies.
- [PR] Bump bouncycastle.version from 1.85 to 1.86 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:36:41 UTC, 3 replies.
- [PR] Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:37:22 UTC, 3 replies.
- [PR] Bump org.bitbucket.b_c:jose4j from 0.9.6 to 0.9.7 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:39:34 UTC, 3 replies.
- [PR] Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 22:34:30 UTC, 3 replies.
- [PR] Bump tomcat.version from 11.0.25 to 11.0.26 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 22:35:22 UTC, 3 replies.
- [jira] [Assigned] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/16 09:02:00 UTC, 0 replies.
- [jira] [Resolved] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/16 09:09:00 UTC, 0 replies.
- [PR] Bump groovy.version from 6.0.0-RC-2 to 6.0.0-RC-3 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 22:34:27 UTC, 3 replies.
- [PR] Bump net.bytebuddy:byte-buddy-agent from 1.17.8 to 1.18.14 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 22:34:53 UTC, 2 replies.
- [PR] Bump org.webjars:swagger-ui from 5.32.14 to 5.32.15 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 22:35:40 UTC, 3 replies.
- [PR] Complete JCache support for Core [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/21 10:17:38 UTC, 1 replies.
- [PR] Bump hibernate.version from 7.4.8.Final to 7.4.9.Final [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 22:33:34 UTC, 3 replies.
- [PR] Bump org.codehaus.cargo:cargo-maven3-plugin from 1.10.28 to 1.10.29 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 22:33:53 UTC, 3 replies.
- [PR] Bump github/codeql-action from 4.38.0 to 4.38.1 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 22:33:56 UTC, 3 replies.
- [PR] Bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 22:39:27 UTC, 3 replies.
- [PR] Bump org.glassfish:jakarta.faces from 4.1.16 to 4.1.17 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 22:40:17 UTC, 3 replies.
- [jira] [Created] (SYNCOPE-1998) Delegated administration errors during propagation execution - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/22 13:29:00 UTC, 0 replies.
- [jira] [Updated] (SYNCOPE-1998) Delegated administration errors during propagation execution - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/22 13:30:00 UTC, 2 replies.
- [jira] [Commented] (SYNCOPE-1998) Delegated administration errors during propagation execution - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/22 13:34:00 UTC, 2 replies.
- [jira] [Resolved] (SYNCOPE-1998) Delegated administration errors during propagation execution - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/22 13:44:00 UTC, 0 replies.
- [PR] Bump org.apache:apache from 39 to 40 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 22:32:39 UTC, 3 replies.
- [PR] Bump groovy.version from 6.0.0-RC-3 to 6.0.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 22:34:22 UTC, 3 replies.
- [PR] Bump com.icegreen:greenmail from 2.1.13 to 2.1.14 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 22:34:42 UTC, 3 replies.
- [PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.2.3 to 4.4.1 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 22:36:30 UTC, 3 replies.
- [PR] Bump hibernate.version from 7.4.9.Final to 7.4.10.Final [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 22:38:31 UTC, 3 replies.
- [PR] Implement theme switcher [syncope] - posted by "TatoniMatteo (via GitHub)" <gi...@apache.org> on 2026/09/24 10:24:24 UTC, 2 replies.
- [jira] [Created] (SYNCOPE-1999) Manager entitlements not computed via memberships - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/24 13:56:00 UTC, 0 replies.
- [PR] [SYNCOPE-1999] Fixing managed users / groups / any objects find opera… [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/24 13:58:25 UTC, 0 replies.
- [PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.4.1 to 4.4.2 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 22:35:19 UTC, 3 replies.
- Re: [PR] [SYNCOPE-1999] Fixing managed users / groups / any objects find operations [syncope] - posted by "ilgrosso (via GitHub)" <gi...@apache.org> on 2026/09/25 06:23:25 UTC, 0 replies.
- [jira] [Commented] (SYNCOPE-1999) Manager entitlements not computed via memberships - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/25 06:24:00 UTC, 1 replies.
- [jira] [Resolved] (SYNCOPE-1999) Manager entitlements not computed via memberships - posted by "Francesco Chicchiriccò (Jira)" <ji...@apache.org> on 2026/09/25 07:43:00 UTC, 0 replies.
- [PR] Bump github/codeql-action from 4.38.1 to 4.38.2 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 22:33:31 UTC, 2 replies.
- [PR] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 22:34:34 UTC, 3 replies.
- [PR] Bump org.apache.tika:tika-core from 4.0.0 to 4.1.0 [syncope] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 22:37:24 UTC, 3 replies.