You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@syncope.apache.org by "Francesco Chicchiriccò (Confluence)" <no...@apache.org> on 2026/09/14 09:00:00 UTC
[CONF] Apache Syncope > Capriccio

There's **1 new edit** on this page  
---  
|  
---  
|  | [![page icon](cid:page-
icon)](https://cwiki.apache.org/confluence/spaces/SYNCOPE/pages/406621504/Capriccio?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400583&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view
"page icon")  
---  
[Capriccio](https://cwiki.apache.org/confluence/spaces/SYNCOPE/pages/406621504/Capriccio?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400583&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view
"Capriccio")  
|  |  |  |  |
![](cid:avatar_961a48ca7baf89d280ef1d6114c79341d6961de9095a5b511f196ccf7ee159a4)
|  | Francesco Chicchiriccò edited this page  
---  
|  
|  | Here's what changed:  
---  
|

...

Check the [Reference Guide](https://syncope.apache.org/docs/reference-
guide.html#production-mode).

## Security

  * CVE-2026-73178
  * CVE-2026-73191
  * CVE-2026-73195
  * CVE-2026-73236
  * CVE-2026-73370
  * CVE-2026-73470
  * CVE-2026-73579
  * CVE-2026-73668
  * CVE-2026-75015
  * CVE-2026-75030
  * CVE-2026-77051
  * CVE-2026-77147
  * CVE-2026-77181
  * CVE-2026-77883
  * CVE-2026-78318
  * CVE-2026-78330
  * CVE-2026-78336
  * CVE-2026-82232
  * CVE-2026-86460
  * CVE-2026-87779
  * CVE-2026-87785
  * CVE-2026-87802

## Changelog

### Bug

  * [[SYNCOPE-1986](https://issues.apache.org/jira/browse/SYNCOPE-1986)] - Upgrader does not copy user/group manager from user/group owner of groups
  * [[SYNCOPE-1987](https://issues.apache.org/jira/browse/SYNCOPE-1987)] - Improve SQL upgrade statement generation for Syncope 4.0 → 4.1 persistence migration
  * [[SYNCOPE-1989](https://issues.apache.org/jira/browse/SYNCOPE-1989)] - Dark theme display issues

...

  * CXF 4.1.6 → 4.1.7
  * Spring Boot 3.5.14 → 3.5.15
  * Spring Cloud Gateway 4.3.4 → 4.3.5
  * Apereo CAS 7.3.7 → 7.3.7.3
  * ConnId 
    * Base: 1.6.1.0 → 1.6.1.1
    * REST: 1.1.1 → 1.1.2
    * DB: 2.4.1 → 2.4.2

## Security

  * CVE-2026-63071
  * CVE-2026-62418
  * CVE-2026-62183
  * CVE-2026-57308
  * CVE-2026-53421
  * CVE-2026-53405

...

  * CXF 4.1.5 → 4.1.6
  * Spring Boot 3.5.13 → 3.5.14
  * Spring Cloud Gateway 4.3.3 → 4.3.4
  * Apereo CAS 7.3.5 → 7.3.7
  * Apereo CAS Client 4.0.4 → 4.1.1
  * OpenSAML 5.1.1 → 5.2.2

## Security

  * [CVE-2026-42797](https://syncope.apache.org/security#CVE-2026-42797.3A_Apache_Syncope.3A_JexlContextBuilder_Information_Disclosure)

  * [CVE-2026-42782](https://syncope.apache.org/security#CVE-2026-42782.3A_Apache_Syncope.3A_Post-auth_RCE_via_Groovy_static)

  * [Apereo CAS Client JWT Vulnerability](https://apereo.github.io/2026/05/20/casc-jwt-vuln/)
  * [OpenSAML vulnerability](https://shibboleth.net/community/advisories/secadv_20260513a.txt)

...  
  
---  
|  |  | [Go to page
history](https://cwiki.apache.org/confluence/pages/viewpreviousversions.action?pageId=406621504&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400583&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9 "Go to page
history")  
---  
---  
| [View
page](https://cwiki.apache.org/confluence/spaces/SYNCOPE/pages/406621504/Capriccio?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400583&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view)  
---  
  
|  | [Stop watching
space](https://cwiki.apache.org/confluence/users/removespacenotification.action?spaceKey=SYNCOPE&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400583&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=stop-
watching&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4c3JmOjhhYTk4MDg3NGUzNmExZWIwMTRlMzZhMmM0MTY3OWI5IiwicXNoIjoiOGEzMmMzMDM2MmM2MGUxOTU0NWQ1Mzg0YWFlNGM3NWQ4MGJiNmZkNDIwYTJlOTk2YWEwOWM4OTExYWU0NTBkMSIsImlzcyI6ImNvbmZsdWVuY2Vfbm90aWZpY2F0aW9uc0FSRUgtWFVEMS1QT1FHLUNTQU8iLCJleHAiOjE3ODk5ODEyMDAsImlhdCI6MTc4OTM3NjQwMH0.MeyJa43GCf6g2JLugxCqrT2iwRvK1RRZh1HrqS1RDJI)
| •  
---|---  
[Manage
notifications](https://cwiki.apache.org/confluence/users/editmyemailsettings.action?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400583&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=manage)  
---  
| ![Confluence logo big](cid:footer-desktop-logo)  
---  
This message was sent by Atlassian Confluence 9.2.21  
![](cid:footer-mobile-logo)  
---