Openfire 4.7.2 Release

Bug

• [OF-2465] - Prevent using a collection function with itself as an argument
• [OF-2458] - ConcurrentModificationException in MUC cache size calculation
• [OF-2456] - MUC nickname changes are not properly propagated in cluster
• [OF-2450] - When pausing a BOSH connection, wrong connection could get answered to
• [OF-2448] - Do not close replacement BOSH connection
• [OF-2444] - Deadlock in BOSH
• [OF-2431] - Incorrect restriction on retrieving member-list of MUC room
• [OF-2421] - OccupantManager should be thread-safe
• [OF-2401] - Pubsub node should not change parent without changing parentIdentifier

Improvement

• [OF-2460] - Bumps mysql-connector-java from 8.0.27 to 8.0.28.
• [OF-2446] - Use more appropriate data type for org.jivesoftware.openfire.http.HttpSession#sentElements
• [OF-2445] - BOSH: prevent pendingElements to be added to if HttpSession is closed
• [OF-2432] - Expose member-only MUCs member list to all occupants
• [OF-2428] - Allow MUC occupants to ask each-other's VCards
• [OF-2424] - LocalSession.toString should not log an error
• [OF-2416] - Allow PEP to be enabled/disabled without restarting Openfire
• [OF-2405] - Enhance log info of loaded plugin by version
• [OF-2398] - Show 'locked' room status in admin console

sha256sum values

998e469fad00452004c9f9d6c309c6749fa48d53af48c1501407f0f77870edca  openfire-4.7.2-1.noarch.rpm
72ee5a31685f6010fc14a992d87d2d1f9c49b79b4e718c239520911ec7167340  openfire_4.7.2_all.deb
674bab49908ff4de14f54dab1fdf7a6a29904b32f00669289b793d8dc19189c8  openfire_4_7_2.dmg
66571c760776d02a28d00ed3c0ca085c327a1874f9d75f8b2037b347ec99decb  openfire_4_7_2.exe
707ede6cc6d8d8bcce257c7f30d8a79fc7ed52576fb217a8220b800f2d52be64  openfire_4_7_2.tar.gz
8eeaf4f07948d10b6b77b3e1e8b8d1f65a6ad3ffd85e5353a2d8055503d724fc  openfire_4_7_2_x64.exe
ad07c991a3812a45250b303e95129a37242de01a591cce438057437d4f5a30d9  openfire_4_7_2.zip

Openfire 4.7.1 Release

Bug

• [OF-2392] - Logging fails when Openfire started with Install4j 'openfire' launcher
• [OF-2381] - MUC idle user handling
• [OF-2379] - In-memory pubsub representation should guarantee order of items
• [OF-2375] - Fix references to openfire.log

Improvement

• [OF-2394] - Bump postgresql from 42.2.25 to 42.3.3
• [OF-2393] - Update SLF4J to 1.7.36
• [OF-2390] - Increase MUC idle kick default value to allow for SM
• [OF-2387] - Update Postgres driver

Sub Task

• [OF-113] - Openfires admin gui allows to enter long group names while the database supports only 50 characters.

Tasks

• [OF-2384] - Enable Openfire debugging for Docker
• [OF-2376] - Update mysql-connector from 8.0.27 to 8.0.28

sha256sum values

ec8e0a8a52cb28b50afea8060664d2c28a66b99f529e1c79a80e44d3dd14322d  openfire-4.7.1-1.noarch.rpm
be5fd37af0d45f5b22a56b617154615ac8ed0d8424744d8cfb0b94c34b182cbb  openfire_4.7.1_all.deb
2a5db207e92482147082157ea7c0b308865cbf5efc414be244fb29d14a87c0d3  openfire_4_7_1.dmg
5632e794bc13cb00556d1fa80a3262837049e21a6c9a40ea6dce06b4411d8608  openfire_4_7_1.exe
c8007ca87780b349db2c42e013fd129c7f24a189ce34c4595fe2a55fcb8ac404  openfire_4_7_1.tar.gz
ece0e0adaa907710779633427be96b0c72b00bf61d335a28f18a04e0d32fd683  openfire_4_7_1_x64.exe
112b0ef0604e6d3a3ee5eaac9fc604d468c679fa453825164fb51ea16149348b  openfire_4_7_1.zip

Openfire 4.7.0 Release

Release notes - Openfire - Version 4.7.0

Bug

OF-2368 Ghost detection shouldn't kick non-ghost occupants

OF-2367 (TCP) clients are suddenly unable to log into the server

OF-2365 Parent node subscribers shouldn't always get pubsub node notifications

OF-2358 When a room is destroyed, the room instance might be non-existent

OF-2350 DefaultExternalizableUtil ignores provided ClassLoader instances

OF-2348 Plugin JAR can't unload on Windows with newer versions of Java

OF-2346 XMPPServer#matchesComponent shouldn't require full-JID match

OF-2345 component-based address incorrectly identified as remote

OF-2343 Inconsistent leave presence sending to leaving occupant

OF-2341 Apparent thread lock (deadlock?) in MUC after clustering reimplementation

OF-2339 Incomplete room list following a cluster split

OF-2338 NullPointerException on MUC search if name is empty

OF-2337 PEP publishing fails after reboot

OF-2336 DefaultCache put returns wrong value when to big value is added

OF-2329 XML parsing bug when tag-name is not followed by space or '>'

OF-2328 Error when standalone Openfire checks for timed out users

OF-2325 100% CPU from never-ending Dialback

OF-2324 NullPointerException in client sessions page on admin console

OF-2322 Outbound S2S stanzas can be delivered out-of-order

OF-2321 Concurrency issue with sending/establishing outbound S2S connection.

OF-2315 NPE when setting up S2S

OF-2314 Cache data inconsistency: outgoing server sessions

OF-2313 Cache data inconsistency: incoming server sessions

OF-2312 Not all admins are warned when cache inconsistencies occur

OF-2311 Cache data inconsistency: Sessions

OF-2308 MUC should disallow nickname change to reserved nickname

OF-2305 MUC nickname change processed as new join

OF-2304 MUC nickname changes should not be possible for non-occupants

OF-2300 Clustered caches can loose 'local' data upon cluster breakage.

OF-2299 NullPointerException when cleaning up directed presences in 3-node cluster

OF-2297 Cluster leave can result in lost data MUC

OF-2296 Cluster join/leave events are processed twice in MUC

OF-2294 MUC consistency check failure

OF-2293 Duplicate occupant in MUC

OF-2292 ConcurrentModificationException in new MUC cluster code

OF-2291 ConcurrentModificationException in new MUC cluster code

OF-2290 Cache locking with Strings has problems equal to using a String as a mutex

OF-2289 String-based Interners still can cause deadlocks

OF-2282 Log4j config is ignored at boot time.

OF-2281 Admin console error when using In-Memory datastore for pubsub

OF-2278 Cache locking does not always work with primitive types

OF-2250 Multiplexer backup deliverer should be used

OF-2249 Backup delivery for BOSH should be 'offline'

OF-2245 Prevent needlessly scheduled tasks after Http Session closure

OF-2244 Offline presence subscription loses details

OF-2213 Update dependencies identified by Snyk

OF-2206 BOSH session disconnect through server should inform client

OF-2167 Federated users should be able to query a MUC room in a cluster

OF-2165 Prevent potential nickname clashes when occupants of clustered MUC room are merged.

OF-2164 Updating A MUC service should propagate in the cluster

OF-2156 BOSH Concurrency issue

Improvement

OF-2371 Outbound S2S stanza queue should be larger

OF-2370 RemoteServerManager's canAccess should evaluate both Direct and nonDirect TLS

OF-2369 Do not establish S2S when not accepting S2S of the same type

OF-2363 Improve LGTM score for xmppserver/webapp/javascript

OF-2362 JDBCAdminProvider LGTM synchronising on a string

OF-2361 GroupManager LGTM String Synchronisation Changes

OF-2360 Create API to check for availability of plugins/versions on each cluster node

OF-2357 Update SLF4J to 1.7.32

OF-2356 Update Bouncy Castle to 1.70

OF-2355 Update Log4j to 2.17.1

OF-2354 String-based SystemProperty lists should allow for whitespace comma separation

OF-2353 Update Log4j dependency to 2.16.0 to address Log4Shell/LogJam

OF-2352 Use plugin-provided servlet context

OF-2351 Update Log4j dependency to 2.15.0 to address Log4Shell/LogJam

OF-2349 Admin console should show (full) default value for system property

OF-2340 send stanzas that are 'responses' through PacketRouter, not RoutingTable

OF-2320 MUC room avatars fail

OF-2319 muc#roomconfig_allowpm should only affect Message stanzas

OF-2317 Prevent NPE when admin page obtained without session

OF-2316 Make S2S fast-discard timeout configurable

OF-2307 Changing MUC nickname to one that's already used by your other resource

OF-2303 Remove unused UserManager field from SessionManager

OF-2298 Use status code 333 when MUC occupants leave due to clustering error

OF-2287 Add MUCEventDelegate to interface

OF-2283 Show distinct servers when looking at remote S2S details

OF-2276 Broadcast status codes when privacy settings of a MUC room change

OF-2275 When joining a MUC room that has logging enabled, status 170 should be returned.

OF-2256 Add CORS headers to websockets

OF-2254 Distinguish between property values that are set to the default value, or are just defaults.

OF-2252 Reduce log level for BOSH request that time out

OF-2251 Threadpool for BOSH network-IO should be configurable

OF-2248 BOSH...

Openfire 4.5.6 Release

Release notes - Openfire - Version 4.5.6

Bug

OF-2093 JDK11: java.lang.NoSuchMethodError: java.nio.CharBuffer.flip()

Improvement

OF-2355 Update Log4j to 2.17.1

sha256sum values

3cf7be64dec0ab0d410ec38b15fae00eecd681c72140a8ad3ccc48be52a88982  openfire-4.5.6-1.i686.rpm
16d1d487d852efd80312fa796ffbaa61dd16e7b0e6587234639e9716e82b0745  openfire-4.5.6-1.noarch.rpm
db0fa0f3b0c904f6b15bcac3b4dc60db2aed8f8275f5f6af886d0bc8dbcdaf9c  openfire-4.5.6-1.x86_64.rpm
d7f2bca0bc82ef6ad404d36dcf4c3ba65a6f9191a00873a83c6739658ce124c6  openfire_4.5.6_all.deb
c96f79db2a9e434cc08ef5989062eb352e57315a25765c2a4f1442072eadbe07  openfire_4_5_6_bundledJRE.exe
77061c8aae0a892d041b8695f38ba2fe91b2844259654bb2e55bf505b9debe27  openfire_4_5_6_bundledJRE_x64.exe
c65ccbf45a69c0babe2876a9c511910d2601ff301539e9a4c3d94dc1b82952c9  openfire_4_5_6.dmg
5990611b18b9ffff5ff46dc8bb398306fc6361893c230ee5d71ad852564dcd49  openfire_4_5_6.exe
1f155e858a924e54b172fd884ccd49521fc55d89260b2e074e2b39b4271667c4  openfire_4_5_6.tar.gz
6df1c063efd674c059323431f786e9e2a70a3c6573e1012e2b56f6db7877d28f  openfire_4_5_6_x64.exe
400269969398c6ed90322ea8d199225b0cdf87a90a840d9aa123c0b941b1cfae  openfire_4_5_6.zip

Openfire 4.6.7 Release

This release only updates log4j to 2.17.1

sha256sum values

1a8f1516a3d398b7701ec9a1c8b790a9ece8f3ea59265ccce4e769af5d485f26  openfire-4.6.7-1.i686.rpm
11972b17d60b828345b75fa049469085f22b9aa233082f8fb9bcac90ba0876a6  openfire-4.6.7-1.noarch.rpm
d802fbd9b1a4011fe23c6338d77642cfbc813760d1f5c805bc5934881635edfb  openfire-4.6.7-1.x86_64.rpm
4ab20cb022d5068c1dc0c7024350db4ac63b28a757e216e98ee6863d8ec7d253  openfire_4.6.7_all.deb
2157a17479acc12e6392ad10c2c61d38e478438a279c970a15313e1a49cce7ba  openfire_4_6_7_bundledJRE.exe
ac1e91d23742493a4d56f489e52f77ee5f1db138091600f84b406956e6b701ef  openfire_4_6_7_bundledJRE_x64.exe
baae9416e5979a7dc1c44dab156e540152baf3368e8afe838ee70a64dcaf2ca2  openfire_4_6_7.dmg
b76b304dcbca084830d52da900051f837f605ce22411033fae68a00d28dc0c34  openfire_4_6_7.exe
6b2ba7c4976dbd36249269a453eb176d71a1e7f80575951cdd173d0ec4247056  openfire_4_6_7.tar.gz
fec61e4a573faf634336e535c51112ab94c3f09388ea16948b8c6906ebbdf9ef  openfire_4_6_7_x64.exe
1a92b45968719b7de00181d8dcfc5ef10e335b02deafcf7d6a5053a968ed0646  openfire_4_6_7.zip

Openfire 4.6.6 Release

This release further addresses the log4j CVE

[OF-2353] - Update Log4j dependency to 2.16.0 to address Log4Shell/LogJam.

sha256sum values

507b4899fb1c84b0ffd95c29278eeefd56ac63849bb730192b26779997ada21b  openfire-4.6.6-1.i686.rpm
d2913d913449a9e255b10ea6ee22a5967083a295038c21d3b761bb236c22e0cd  openfire-4.6.6-1.noarch.rpm
02aa7af09286f25fbceef1ea27940e1696ced1e3a6c28b5e0ae094d409580734  openfire-4.6.6-1.x86_64.rpm
3add3c877745dcc6aacd335cfc8fe1674567bb3b28728cfa6c008556c59a9e98  openfire_4.6.6_all.deb
00c5ecbbf725de1093bfe3e5774b8c0e532742435439f70a4435fc5bed828b99  openfire_4_6_6_bundledJRE.exe
4ff92208e62f0455295a8cf68d57e2d9e3ede15c71aaab26cf1a410dce5aba5b  openfire_4_6_6_bundledJRE_x64.exe
2584a6b61f0d9447a868f9bfadb5892d56d854198604b3ace9b638b8c217cac4  openfire_4_6_6.dmg
6cc42bfb60a5f8453c37d980c24c2a5ba48e1e1363ebfcc5d7f2e1deb6da5f17  openfire_4_6_6.exe
6431a22d2dd9f077b9b2ee8949238c0f076ab34d43ee200a6873fa5453630bd6  openfire_4_6_6.tar.gz
ec8da5fdc93065df9bf41c0f4aebd6bb47f1dea11dcc96665ac0105f035378b2  openfire_4_6_6_x64.exe
af68252b98b8af6afb0753b4054adcf4cab1968579eaaf644d4da663e9461dce  openfire_4_6_6.zip

Openfire 4.5.5 Release

This is a release addressing the log4j CVE

OF-2353 -Update Log4j dependency to 2.16.0 to address Log4Shell/LogJam

sha256sum values

247f0769e0a449c698ac9c23b658a02131ac6f774f4394dc9bb4e7f114159cc8  openfire-4.5.5-1.i686.rpm
4603f92ce9822d1f43d27a9e15b859232cd09f391e9aeef0b99a782a03ecd12e  openfire-4.5.5-1.noarch.rpm
9df54cbef30664635ed2977a21beded56fa120c5ff9e89b4cfa7466171344517  openfire-4.5.5-1.x86_64.rpm
0815f07094fcfaf4e17aca3ea26f42835b5ff1b486475aff6b743e914709e788  openfire_4.5.5_all.deb
dff2e81da7457e3d8c1ee9e23ff43dd812f56db09df53588df7a5ea5622b1e6e  openfire_4_5_5_bundledJRE.exe
96c2a4f5ed94dda76942ec7e540430c505448a2625a10f52cdc91c2dae0f720a  openfire_4_5_5_bundledJRE_x64.exe
a1ddd675b24b661186645786d1489cb6d80c90c2cae178992af509b5241fb275  openfire_4_5_5.dmg
971b97bc9d405a03d2c3fba51a698cf92397b24104b28fec06b993b6d52568ce  openfire_4_5_5.exe
a5f199bf2347725b952a995c1cfbeb1b8e45c9a26c177100669eeed7679da742  openfire_4_5_5.tar.gz
b5b55c5938b430fa50c702da6b8336be7f79d2c97eb09623dc0c9bd59663aead  openfire_4_5_5_x64.exe
44f90a4f4f7ecebd7cffadc7f108e4bcb8b70dc77b36698d48efaf3eb7650c91  openfire_4_5_5.zip

Openfire 4.6.5 Release

Changelog

OF-2277 Numbering in room enumeration is off by one.

OF-2273 Disabling presence broadcast will cause MUC join failure

OF-2268 Concurrency issue when starting JMX manager

OF-2267 Cannot browse MUC rooms of services other than the first one.

OF-2351 Update Log4j dependency to address LogJam

OF-2271 Add field type returned data form fields

sha256sum

926e852abfe67970a4a64b7a58d16adbd3ae65269921288909d2a353457ac350  openfire-4.6.5-1.i686.rpm
5041fd66f5cf4642d25012642d827ad80c40057ba66f79aad04918edc94085ec  openfire-4.6.5-1.noarch.rpm
f1d7ed2d5d5bbd12c3af896329df48f97b73ae5435980b524248760a246552f6  openfire-4.6.5-1.x86_64.rpm
da113f737514457209194024f57a90f52f499fefbf0a9eb3e3d888b24f214ece  openfire_4.6.5_all.deb
c16e13348767b489aef905d912eafca9650428af16a729b63a208fdbe97c9783  openfire_4_6_5_bundledJRE.exe
e03cd4e5b2a76b203540580ca2714541ee86b1ef3b677d5c312d099567674f2d  openfire_4_6_5_bundledJRE_x64.exe
28d628db9cce3cfb7acfa19977235b569729bcebff65a511dd882a4c1b554d6c  openfire_4_6_5.dmg
cb1c4a5f888cbeeb6bbfd29460c8095941cecddd8c5f03b3d3f1ca412a995e81  openfire_4_6_5.exe
fcc3d45e9b80536b463fedbb959ff1e4f5fc5cef180502f6810c0f025a01f4ac  openfire_4_6_5.tar.gz
fe216d1eecb23050ebbf28f7afa8930ca167d99516051c3f5e03d545e183cf4c  openfire_4_6_5_x64.exe
fd0f853b249a8853da51b056f1e6b31d04c49763394321dbd60abb8cef9df940  openfire_4_6_5.zip

Openfire 4.7.0 Beta

Improvement

• [OF-2349] - Admin console should show \(full\) default value for system property
• [OF-2340] - send stanzas that are 'responses' through PacketRouter, not RoutingTable
• [OF-2320] - MUC room avatars fail
• [OF-2317] - Prevent NPE when admin page obtained without session
• [OF-2316] - Make S2S fast-discard timeout configurable
• [OF-2307] - Changing MUC nickname to one that's already used by your other resource
• [OF-2303] - Remove unused UserManager field from SessionManager
• [OF-2298] - Use status code 333 when MUC occupants leave due to clustering error
• [OF-2287] - Add MUCEventDelegate to interface
• [OF-2283] - Show distinct servers when looking at remote S2S details
• [OF-2276] - Broadcast status codes when privacy settings of a MUC room change
• [OF-2275] - When joining a MUC room that has logging enabled, status 170 should be returned.
• [OF-2256] - Add CORS headers to websockets
• [OF-2252] - Reduce log level for BOSH request that time out
• [OF-2251] - Threadpool for BOSH network-IO should be configurable
• [OF-2248] - BOSH configuration should go into SystemProperty instances
• [OF-2247] - BOSH session configuration should not be mutable
• [OF-2246] - Allow backup delivery to be disabled
• [OF-2239] - Make it easier to cache plugin class instances
• [OF-2212] - Allow admin console's cert to be auto-updated
• [OF-2200] - Apply alternating row background color scheme to group members list.
• [OF-2175] - Reduce verbosity of anonymous users trying to authenticate errors
• [OF-2129] - Remove Flash support
• [OF-2115] - Remove unused webdav servlet
• [OF-1840] - Improve admin console log viewer
• [OF-264] - Add group selection field in Create New User page

New Feature

• [OF-2286] - Allow log file to be downloaded from Admin Console
• [OF-2158] - Update notifications should include cluster node reference

Sub-task

• [OF-2272] - Remove notion of 'remote' and 'local' MUC entities
• [OF-2230] - On witnessing another node leaving a cluster, generate leave presence about all MUC participants from that node to all node-local MUC participants
• [OF-2228] - On Cluster Join, repopulate the newly acquired clustered cache with the local copy of items
• [OF-2227] - On Cluster Leave, repopulate the new blank local cache with the local copy of items contributed to the clustered cache

sha256sum values for artifacts

6cf4cc7a0a834b23cdea0ade198c724ee4f0be5560f1d16321414497c4f5903b  openfire-4.7.0-0.2.beta.noarch.rpm
ceee17f76d2645f2fcc29f5a84efbcc7fc376f7e01ef05ba28b65e850fff96f8  openfire_4.7.0.beta_all.deb
71e1a373420e048ee4c5921bcb54b4efa2357aaf9e57501284f20f0edeaa0428  openfire_4_7_0_beta.dmg
7d1f248e03c60dbb071eeee6abf671932c47e154fae888bee9293f875323fdd7  openfire_4_7_0_beta.exe
44bebac3da5f5d5d00270dcc303b34b6efce4c7c2bd1bfd4520827f6e8a58549  openfire_4_7_0_beta.tar.gz
72f1cd7dc2015ec70902b3b18a5248651a6e3091ba12ebf8d2767834b057c17f  openfire_4_7_0_beta_x64.exe
76e4cf8da32b062ed719812792849bcfc475a22208e721a5f1b7dcddda45a4a4  openfire_4_7_0_beta.zip

Openfire 4.6.4 Release

sha1sums

42bff5adc51a2347952f436fed25b5013ee0a146  openfire_4_6_4.dmg
d1f85a2854e42ae48e4000480fbbb55e39f84e56  openfire-4.6.4-1.i686.rpm
1a5c43e904726192e2abc36858eb2df0b17244a2  openfire-4.6.4-1.noarch.rpm
689c046afdbd63e22615a599f076851a49af50cd  openfire-4.6.4-1.x86_64.rpm
18117c3fee17d1b6d704b85c42d7d3386e520983  openfire_4.6.4_all.deb
36b1953db86406a1eb2344d1b0ffada0f57b8b32  openfire_4_6_4_bundledJRE.exe
72de355806bb2ce414655cf0da2801ce47032f03  openfire_4_6_4_bundledJRE_x64.exe
3086b70e04077b56dbb59931a87937e619995f0b  openfire_4_6_4.exe
7dab9c9a61456508793ede0ab13c7fe1f18e12d1  openfire_4_6_4.tar.gz
4f05ea94729800bbc6272b8ff98f3c8aa81d9207  openfire_4_6_4_x64.exe
792f68efc3943658e71586dbe305420499aab6b2  openfire_4_6_4.zip
9b3e031e4b064b5e4c618476b5429e077d4c1abb  openfire_src_4_6_3.tar.gz
bd79eae0079cba4a84cc9d1e249a62c3f45d6539  openfire_src_4_6_3.zip

Bug

• [OF-2266] - Occasional test failure for LoginLimitManager
• [OF-2265] - Websocket fails to deliver certain errors
• [OF-2262] - Admin console does not show MUC rooms that are not in memory
• [OF-2241] - IQVersionHandler fails to handle bosh/websocket clients
• [OF-2240] - Self-presence status not added to kick presence
• [OF-2190] - Inconsistent normalization of MUC room name

Improvement

• [OF-2264] - Bump commons-io from 2.6 to 2.7
• [OF-2263] - Do not list every page of MUC rooms
• [OF-2261] - Re-word MUCs cleaned from memory option in admin console
• [OF-2260] - Show (full) name of group members on admin console
• [OF-2259] - Increase startup speed with large amounts of MUC rooms
• [OF-2258] - Make thread pools configurable
• [OF-2257] - Expose state of thread pools via JMX
• [OF-2253] - Return IQ auth error when sending data before being authenticated
• [OF-2243] - Version Check threads should not sleep in the TaskEngine
• [OF-2083] - Do not store offline messages that are already stored
• [OF-2082] - Consider using OfflineMessage instead of Message in OfflineMessageListener