dev
Thread
Date
Earlier messages
Messages by Thread
[PR] Bump github/codeql-action from 4.37.9 to 4.38.0 [syncope]
via GitHub
[PR] Bump org.bitbucket.b_c:jose4j from 0.9.6 to 0.9.7 [syncope]
via GitHub
[PR] Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 [syncope]
via GitHub
[PR] Bump bouncycastle.version from 1.85 to 1.86 [syncope]
via GitHub
[PR] Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 [syncope]
via GitHub
[PR] Bump org.apache.zookeeper:zookeeper from 3.9.5 to 3.9.6 [syncope]
via GitHub
[jira] [Updated] (SYNCOPE-1997) Incorrect resource connectivity check with credential override
Jira
CVE-2026-87802: Apache Syncope: SRA OAuth2 JWT signature verification bypass
Francesco Chicchiriccò
CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist
Francesco Chicchiriccò
CVE-2026-73195: Apache Syncope: CSV export spreadsheet formula injection
Francesco Chicchiriccò
[ANN] Apache Syncope 4.1.3
Francesco Chicchiriccò
CVE-2026-87779: Apache Syncope: AES Secret Key disclosure via log output
Francesco Chicchiriccò
CVE-2026-77051: Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search
Francesco Chicchiriccò
CVE-2026-78336: Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user
Francesco Chicchiriccò
CVE-2026-87785: Apache Syncope: JWT subject spoofing
Francesco Chicchiriccò
CVE-2026-86460: Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence
Francesco Chicchiriccò
CVE-2026-82232: Apache Syncope: SQL injection via sort parameter in Task search
Francesco Chicchiriccò
CVE-2026-78318: Apache Syncope: Unauthenticated reflected XSS in Console and Enduser
Francesco Chicchiriccò
CVE-2026-78330: Apache Syncope: Privilege escalation for admin user via JWT authentication
Francesco Chicchiriccò
CVE-2026-77181: Apache Syncope: ClientApp update entitlement not effective
Francesco Chicchiriccò
CVE-2026-73178: Apache Syncope: JWT Access Token takeover
Francesco Chicchiriccò
CVE-2026-77147: Apache Syncope: Groovy Sandbox escape for empty CommandArgs
Francesco Chicchiriccò
CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values
Francesco Chicchiriccò
CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable
Francesco Chicchiriccò
CVE-2026-75030: Apache Syncope: Incomplete authorization checks for Group members deprovisioning
Francesco Chicchiriccò
CVE-2026-73470: Apache Syncope: Delegating users can grant unowned Roles
Francesco Chicchiriccò
CVE-2026-73579: Apache Syncope: Non-recursive Any search could skip Realms restrictions
Francesco Chicchiriccò
CVE-2026-73370: Apache Syncope: Cross-Realm boundaries reconciliation bypass
Francesco Chicchiriccò
CVE-2026-73236: Apache Syncope: Cross-Realm authorization bypass in delegated administration
Francesco Chicchiriccò
CVE-2026-73191: Apache Syncope: CAS service URL injection via Forwarded HTTP headers
Francesco Chicchiriccò
[ANN] Apache Syncope 4.0.8
Francesco Chicchiriccò
[jira] [Resolved] (SYNCOPE-1997) Incorrect resource connectivity check with credential override
Matteo Tatoni (Jira)
[jira] [Commented] (SYNCOPE-1997) Incorrect resource connectivity check with credential override
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1997) Incorrect resource connectivity check with credential override
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1997) Incorrect resource connectivity check with credential override
ASF subversion and git services (Jira)
[PR] hide timestamp in generated OpenAPI code [syncope]
via GitHub
Re: [PR] hide timestamp in generated OpenAPI code [syncope]
via GitHub
[PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.2.2 to 4.2.3 [syncope]
via GitHub
Re: [PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.2.2 to 4.2.3 [syncope]
via GitHub
Re: [PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.2.2 to 4.2.3 [syncope]
via GitHub
Re: [PR] Bump org.wiremock.integrations:wiremock-spring-boot from 4.2.2 to 4.2.3 [syncope]
via GitHub
[VOTE] Apache Syncope 4.0.8
Francesco Chicchiriccò
Re: [VOTE] Apache Syncope 4.0.8
Lorenzo Di Cola
Re: [VOTE] Apache Syncope 4.0.8
Fabio Martelli
Re: [VOTE] Apache Syncope 4.0.8
Massimiliano Perrone
[RESULT] [VOTE] Apache Syncope 4.0.8
Francesco Chicchiriccò
Re: [VOTE] Apache Syncope 4.0.8
Marco Di Sabatino Di Diodoro
[PR] [SYNCOPE-1997] - Fix connectivity check and improve topology UI to prevent scrolling [syncope]
via GitHub
Re: [PR] [SYNCOPE-1997] - Fix connectivity check and improve topology UI to prevent scrolling [syncope]
via GitHub
[jira] [Created] (SYNCOPE-1997) Incorrect resource connectivity check with credential override
Matteo Tatoni (Jira)
[VOTE] Apache Syncope 4.1.3
Francesco Chicchiriccò
Re: [VOTE] Apache Syncope 4.1.3
Lorenzo Di Cola
Re: [VOTE] Apache Syncope 4.1.3
Fabio Martelli
Re: [VOTE] Apache Syncope 4.1.3
Massimiliano Perrone
Re: [VOTE] Apache Syncope 4.1.3
Marco Di Sabatino Di Diodoro
[RESULT] [VOTE] Apache Syncope 4.1.3
Francesco Chicchiriccò
Re: [VOTE] Apache Syncope 4.1.3
Andrea Patricelli
[PR] Bump pac4j.version from 6.5.7 to 6.5.8 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.7 to 6.5.8 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.7 to 6.5.8 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.7 to 6.5.8 [syncope]
via GitHub
[PR] Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211 [syncope]
via GitHub
Re: [PR] Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211 [syncope]
via GitHub
Re: [PR] Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211 [syncope]
via GitHub
Re: [PR] Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211 [syncope]
via GitHub
[jira] [Resolved] (SYNCOPE-1996) Security production mode
Jira
[PR] Bump org.glassfish:jakarta.faces from 4.1.15 to 4.1.16 [syncope]
via GitHub
Re: [PR] Bump org.glassfish:jakarta.faces from 4.1.15 to 4.1.16 [syncope]
via GitHub
Re: [PR] Bump org.glassfish:jakarta.faces from 4.1.15 to 4.1.16 [syncope]
via GitHub
Re: [PR] Bump org.glassfish:jakarta.faces from 4.1.15 to 4.1.16 [syncope]
via GitHub
[jira] [Commented] (SYNCOPE-1996) Security production mode
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1996) Security production mode
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1996) Security production mode
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1996) Security production mode
ASF subversion and git services (Jira)
[jira] [Created] (SYNCOPE-1996) Security production mode
Jira
[PR] Bump net.bytebuddy:byte-buddy-agent from 1.17.8 to 1.18.13 [syncope]
via GitHub
Re: [PR] Bump net.bytebuddy:byte-buddy-agent from 1.17.8 to 1.18.13 [syncope]
via GitHub
Re: [PR] Bump net.bytebuddy:byte-buddy-agent from 1.17.8 to 1.18.13 [syncope]
via GitHub
[PR] Bump pac4j.version from 6.5.6 to 6.5.7 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.6 to 6.5.7 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.6 to 6.5.7 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.6 to 6.5.7 [syncope]
via GitHub
[PR] Bump wicket-bootstrap.version from 7.0.14 to 7.0.15 [syncope]
via GitHub
Re: [PR] Bump wicket-bootstrap.version from 7.0.14 to 7.0.15 [syncope]
via GitHub
Re: [PR] Bump wicket-bootstrap.version from 7.0.14 to 7.0.15 [syncope]
via GitHub
Re: [PR] Bump wicket-bootstrap.version from 7.0.14 to 7.0.15 [syncope]
via GitHub
[PR] Upgrading maven-surefire-plugin and maven-failsafe-plugin [syncope]
via GitHub
Re: [PR] Upgrading maven-surefire-plugin and maven-failsafe-plugin [syncope]
via GitHub
[PR] Upgrading maven-surefire-plugin and maven-failsafe-plugin [syncope]
via GitHub
Re: [PR] Upgrading maven-surefire-plugin and maven-failsafe-plugin [syncope]
via GitHub
[PR] Bump co.elastic.clients:elasticsearch-java from 9.5.2 to 9.5.3 [syncope]
via GitHub
Re: [PR] Bump co.elastic.clients:elasticsearch-java from 9.5.2 to 9.5.3 [syncope]
via GitHub
Re: [PR] Bump co.elastic.clients:elasticsearch-java from 9.5.2 to 9.5.3 [syncope]
via GitHub
Re: [PR] Bump co.elastic.clients:elasticsearch-java from 9.5.2 to 9.5.3 [syncope]
via GitHub
[PR] Bump io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1 [syncope]
via GitHub
Re: [PR] Bump io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1 [syncope]
via GitHub
Re: [PR] Bump io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1 [syncope]
via GitHub
Re: [PR] Bump io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1 [syncope]
via GitHub
[jira] [Commented] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled
Jira
[PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
[PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0 [syncope]
via GitHub
[jira] [Updated] (SYNCOPE-1995) Console is throwing exception on slow pages with websockets enabled
Andrea Patricelli (Jira)
[jira] [Created] (SYNCOPE-1995) Console is throwing exception on pages with websockets enabled
Andrea Patricelli (Jira)
[jira] [Updated] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled
Andrea Patricelli (Jira)
[jira] [Updated] (SYNCOPE-1995) Console is throwing exception in slow environments on pages with websockets enabled
Jira
[PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [syncope]
via GitHub
Re: [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [syncope]
via GitHub
[jira] [Updated] (SYNCOPE-1994) Provide entity versioning support by adding JaVers integration
Andrea Patricelli (Jira)
[jira] [Updated] (SYNCOPE-1968) WA: support CAS multitenancy
Jira
[jira] [Assigned] (SYNCOPE-1994) Provide entity versioning support by adding JaVers integration
Andrea Patricelli (Jira)
[PR] [SYNCOPE-1968] Map each SRA and WA instance to a single Domain [syncope]
via GitHub
[jira] [Updated] (SYNCOPE-1968) Support multitenancy for WA and SRA
Jira
[jira] [Updated] (SYNCOPE-1968) Support multitenancy for WA and SRA
Jira
[jira] [Created] (SYNCOPE-1994) Provide entity versioning support by adding JaVers integration
Andrea Patricelli (Jira)
[PR] Bump org.glassfish:jakarta.faces from 4.1.14 to 4.1.15 [syncope]
via GitHub
Re: [PR] Bump org.glassfish:jakarta.faces from 4.1.14 to 4.1.15 [syncope]
via GitHub
[jira] [Assigned] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module
Andrea Patricelli (Jira)
[jira] [Resolved] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module
Andrea Patricelli (Jira)
[jira] [Commented] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module
ASF subversion and git services (Jira)
[PR] [SYNCOPE-1993] provide support for enable auto registration parameter also in core module [syncope]
via GitHub
Re: [PR] [SYNCOPE-1993] provide support for enable auto registration parameter also in core module [syncope]
via GitHub
Re: [PR] [SYNCOPE-1993] provide support for enable auto registration parameter also in core module [syncope]
via GitHub
Re: [PR] [SYNCOPE-1993] provide support for enable auto registration parameter also in core module [syncope]
via GitHub
[jira] [Assigned] (SYNCOPE-1718) Consider Flowable replacement
Andrea Patricelli (Jira)
[jira] [Assigned] (SYNCOPE-1718) Consider Flowable replacement
Andrea Patricelli (Jira)
[jira] [Created] (SYNCOPE-1993) Provide support for enabling/disabiling autoregistration also on core module
Andrea Patricelli (Jira)
[PR] Bump io.zonky.test.postgres:embedded-postgres-binaries-bom from 18.4.0 to 18.6.0 [syncope]
via GitHub
Re: [PR] Bump io.zonky.test.postgres:embedded-postgres-binaries-bom from 18.4.0 to 18.6.0 [syncope]
via GitHub
Re: [PR] Bump io.zonky.test.postgres:embedded-postgres-binaries-bom from 18.4.0 to 18.6.0 [syncope]
via GitHub
Re: [PR] Bump io.zonky.test.postgres:embedded-postgres-binaries-bom from 18.4.0 to 18.6.0 [syncope]
via GitHub
[PR] Bump github/codeql-action from 4.37.8 to 4.37.9 [syncope]
via GitHub
Re: [PR] Bump github/codeql-action from 4.37.8 to 4.37.9 [syncope]
via GitHub
Re: [PR] Bump github/codeql-action from 4.37.8 to 4.37.9 [syncope]
via GitHub
Re: [PR] Bump github/codeql-action from 4.37.8 to 4.37.9 [syncope]
via GitHub
[PR] Bump org.jsoup:jsoup from 1.23.1 to 1.23.2 [syncope]
via GitHub
Re: [PR] Bump org.jsoup:jsoup from 1.23.1 to 1.23.2 [syncope]
via GitHub
Re: [PR] Bump org.jsoup:jsoup from 1.23.1 to 1.23.2 [syncope]
via GitHub
Re: [PR] Bump org.jsoup:jsoup from 1.23.1 to 1.23.2 [syncope]
via GitHub
[PR] Bump org.openapitools:openapi-generator-maven-plugin from 7.24.0 to 7.25.0 [syncope]
via GitHub
Re: [PR] Bump org.openapitools:openapi-generator-maven-plugin from 7.24.0 to 7.25.0 [syncope]
via GitHub
Re: [PR] Bump org.openapitools:openapi-generator-maven-plugin from 7.24.0 to 7.25.0 [syncope]
via GitHub
Re: [PR] Bump org.openapitools:openapi-generator-maven-plugin from 7.24.0 to 7.25.0 [syncope]
via GitHub
[PR] Bump pac4j.version from 6.5.5 to 6.5.6 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.5 to 6.5.6 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.5 to 6.5.6 [syncope]
via GitHub
Re: [PR] Bump pac4j.version from 6.5.5 to 6.5.6 [syncope]
via GitHub
[jira] [Resolved] (SYNCOPE-1992) Update JDWP Debug Configuration for Java 22
Alberto Bogi (Jira)
[jira] [Commented] (SYNCOPE-1992) Update JDWP Debug Configuration for Java 22
ASF subversion and git services (Jira)
[jira] [Assigned] (SYNCOPE-1992) Update JDWP Debug Configuration for Java 22
Alberto Bogi (Jira)
[jira] [Created] (SYNCOPE-1992) Update JDWP Debug Configuration for Java 22
Alberto Bogi (Jira)
[PR] [SYNCOPE-1992] Update JDWP Debug Configuration for Java 22 [syncope]
via GitHub
Re: [PR] [SYNCOPE-1992] Update JDWP Debug Configuration for Java 22 [syncope]
via GitHub
Re: [PR] [SYNCOPE-1992] Update JDWP Debug Configuration for Java 22 [syncope]
via GitHub
Re: [PR] [SYNCOPE-1992] Update JDWP Debug Configuration for Java 22 [syncope]
via GitHub
Re: [PR] [SYNCOPE-1992] Update JDWP Debug Configuration for Java 22 [syncope]
via GitHub
[jira] [Updated] (SYNCOPE-1992) Update JDWP Debug Configuration for Java 22
Alberto Bogi (Jira)
[jira] [Updated] (SYNCOPE-1992) Update JDWP Debug Configuration for Java 22
Alberto Bogi (Jira)
[jira] [Updated] (SYNCOPE-1987) Improve SQL upgrade statement generation for Syncope 4.0 → 4.1 persistence migration
Alberto Bogi (Jira)
[jira] [Updated] (SYNCOPE-1987) Improve SQL upgrade statement generation for Syncope 4.0 → 4.1 persistence migration
Alberto Bogi (Jira)
[jira] [Updated] (SYNCOPE-1987) Improve SQL upgrade statement generation for Syncope 4.0 → 4.1 persistence migration
Alberto Bogi (Jira)
[jira] [Updated] (SYNCOPE-1987) Improve SQL upgrade statement generation for Syncope 4.0 → 4.1 persistence migration
Alberto Bogi (Jira)
[PR] Improve LoginPage colors and spaces [syncope]
via GitHub
Re: [PR] Improve LoginPage colors and spaces [syncope]
via GitHub
[jira] [Updated] (SYNCOPE-1991) Exclude binary and encrypted fields from elasticsearch indexing
Jira
[jira] [Resolved] (SYNCOPE-1991) Exclude binary and encrypted attributes from Elasticsearch and OpenSearch indexing
Jira
[jira] [Updated] (SYNCOPE-1991) Exclude binary and encrypted fields from Elasticsearch and OpenSearch indexing
Jira
[jira] [Updated] (SYNCOPE-1991) Exclude binary and encrypted attributes from Elasticsearch and OpenSearch indexing
Jira
[jira] [Commented] (SYNCOPE-1991) Exclude binary and encrypted attributes from Elasticsearch and OpenSearch indexing
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1991) Exclude binary and encrypted attributes from Elasticsearch and OpenSearch indexing
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1991) Exclude binary and encrypted attributes from Elasticsearch and OpenSearch indexing
ASF subversion and git services (Jira)
[jira] [Assigned] (SYNCOPE-1991) Exclude binary and encrypted fields from elasticsearch indexing
Jira
[PR] Bump com.icegreen:greenmail from 2.1.12 to 2.1.13 [syncope]
via GitHub
Re: [PR] Bump com.icegreen:greenmail from 2.1.12 to 2.1.13 [syncope]
via GitHub
Re: [PR] Bump com.icegreen:greenmail from 2.1.12 to 2.1.13 [syncope]
via GitHub
Re: [PR] Bump com.icegreen:greenmail from 2.1.12 to 2.1.13 [syncope]
via GitHub
[jira] [Created] (SYNCOPE-1991) Exclude binary and encrypted fields from elasticsearch indexing
Andrea Patricelli (Jira)
[jira] [Assigned] (SYNCOPE-1990) Add "eye" button to show password in enduser and console login page
Jira
[jira] [Resolved] (SYNCOPE-1990) Add "eye" button to show password in enduser and console login page
Jira
[jira] [Commented] (SYNCOPE-1990) Add "eye" button to show password in enduser and console login page
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1990) Add "eye" button to show password in enduser and console login page
ASF subversion and git services (Jira)
[jira] [Commented] (SYNCOPE-1990) Add "eye" button to show password in enduser and console login page
ASF subversion and git services (Jira)
[PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Re: [PR] [SYNCOPE-1990] "Eye" button to show password in enduser and console login page [syncope]
via GitHub
Earlier messages