Keycloak 26.0.8 — Release Notes & Engineering Impact

<div> <h2>Upgrading</h2> <p>Before upgrading refer to <a href="file:/home/runner/work/keycloak-rel/keycloak-rel/target/web/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p> <h2>All resolved issues</h2> <h3>Enhancements</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/33569">#33569</a> Show User Events on dedicated tab on Client-/User-Details </li> <li><a href="https://github.com/keycloak/keycloak/issues/34091">#34091</a> Username Form should support autocomplete <code>login/ui</code></li> </ul> <h3>Bugs</h3> <ul> <li><a href="https://github.com/keycloak/keycloak/issues/34072">#34072</a> The Realm Selection Dropdown Breaks After 50 Realms In Database <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34207">#34207</a> logout with client_id and/or post_logout_redirect_uri results in bad request on logout confirmation page <code>oidc</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34402">#34402</a> [Keycloak 26.0.2] Getting "Forbidden, permission needed: query-clients" as temp-admin <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34675">#34675</a> Keys tab showing disabled and inactive keys as active <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34995">#34995</a> MySQL database migration issue <code>core</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35048">#35048</a> Filter events by user id and client not working <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35052">#35052</a> `organizationEnabled` and `verifiableCredentialsEnabled` attributes are present as attributes in an export </li> <li><a href="https://github.com/keycloak/keycloak/issues/35273">#35273</a> Edit Help Mode descriptor for Roles in policy form <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35290">#35290</a> Database migration fails after upgrading operator to v26.0.6 <code>core</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35317">#35317</a> Token issuer is null in executeActionsEmail and sendVerifyEmail if no clientId is passed <code>admin/api</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35324">#35324</a> Strange Random behavior - Intermittent missing organization claim in Keycloak JWT token <code>organizations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35410">#35410</a> SAML Adapter Galleon Pack for EAP8 cannot use new metadata options for layers <code>adapter/saml</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35416">#35416</a> Mis-formatted definition list of hashing algorithms </li> <li><a href="https://github.com/keycloak/keycloak/issues/35421">#35421</a> Showing LDAP error message when failing to reset password <code>ldap</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35475">#35475</a> Delete user confirm title is wrong <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35481">#35481</a> Events: Wrong text for user id search <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35488">#35488</a> [Jekins Keycloak CI] - RH-SSO EAP adapters remote saml tests <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35526">#35526</a> Initial keycloak bootstrap suggestion is not correct. <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35544">#35544</a> Upgrading guide 26.0.6 is missing in the built document <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35634">#35634</a> Temporary password toggle in set password dialog is cut off in admin-console <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35675">#35675</a> New install doesn't allow admin user creation <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/35822">#35822</a> Exact searches should be the default when querying user by attributes <code>admin/api</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36394">#36394</a> CVE-2024-11736 Unrestricted admin use of system and environment variables </li> <li><a href="https://github.com/keycloak/keycloak/issues/36395">#36395</a> CVE-2024-11734 Denial of Service in Keycloak Server via Security Headers </li> </ul> </div>