Keycloak 26.0.4 released

October 30 2024

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

• #34284 Keycloak-admin-client should work with the future versions of Keycloak server admin/client-java
• #34382 Make the organization chapter of Server Admin guide available on downstream

Bugs

• #14562 Broken Promise implementation for AuthZ JS adapter/javascript
• #25917 Allow increasing wait time on each failure after the max number of failures is reached authentication
• #33627 ClassNotFoundException OracleXADataSource/OracleDataSource using IDELauncher with Keycloak 26.0.0 dist/quarkus
• #33731 Client Scope updates are not replicated on a distributed keycloak setup in kubernetes admin/api
• #33798 CVE-2021-44549 - org.eclipse.angus/angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication dist/quarkus
• #33987 keycloak.v2 registration: Password policy validation error "errorList is null" login/ui
• #34042 LDAP Pagination not working for role membership in GET_ROLES_FROM_USER_MEMBEROF_ATTRIBUTE strategy ldap
• #34050 Listing federated LDAP users is very slow with import enabled ldap
• #34093 java.util.ConcurrentModificationException when process user sessions update infinispan
• #34412 LDAP: searching users with import disabled is slower since fix for 34050 ldap