Repository navigation
Fix for CVE-2026-18569 (OIDC backchannel logout fix) - fix upgrade guide in upstream - #53689
Conversation
There was a problem hiding this comment.
Copilot review overview
🟢 Approval recommended
The documentation is consistently relocated without altering its technical guidance.
Review effort: Balanced
Findings: None
What changed in this PR
Relocates the CVE-2026-18569 upgrade guidance to the correct 27.0.0 release section.
Changes:
- Adds mandatory OIDC backchannel logout signature-validation guidance to 27.0.0.
- Removes the same guidance from 26.8.1.
| File | Description |
|---|---|
changes-27_0_0.adoc |
Adds the upgrade guidance. |
changes-26_8_1.adoc |
Removes the misplaced guidance. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
5c66844 to
cd9ed8b
Compare
There was a problem hiding this comment.
🟡 Changes recommended
The documented settings are hidden in the Admin Console while signature validation is disabled.
1 open finding
🧠 Review effort: Balanced
Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.
…hannel logout into `changes-27_0_0.adoc` Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
cd9ed8b to
86a3c6d
Compare
There was a problem hiding this comment.
🟢 Approval recommended
The documentation is consistently relocated without altering its technical guidance.
🧠 Review effort: Balanced
Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.
There was a problem hiding this comment.
🟢 Approval recommended
The documentation is moved cleanly without changing its accurate security guidance.
0 open findings
1 resolved since last review
🧠 Review effort: Balanced
Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.
Closes #51381.