Release notes - Openfire - Version 4.5.6

Bug

OF-2093 JDK11: java.lang.NoSuchMethodError: java.nio.CharBuffer.flip()

Improvement

OF-2355 Update Log4j to 2.17.1

sha256sum values

3cf7be64dec0ab0d410ec38b15fae00eecd681c72140a8ad3ccc48be52a88982  openfire-4.5.6-1.i686.rpm
16d1d487d852efd80312fa796ffbaa61dd16e7b0e6587234639e9716e82b0745  openfire-4.5.6-1.noarch.rpm
db0fa0f3b0c904f6b15bcac3b4dc60db2aed8f8275f5f6af886d0bc8dbcdaf9c  openfire-4.5.6-1.x86_64.rpm
d7f2bca0bc82ef6ad404d36dcf4c3ba65a6f9191a00873a83c6739658ce124c6  openfire_4.5.6_all.deb
c96f79db2a9e434cc08ef5989062eb352e57315a25765c2a4f1442072eadbe07  openfire_4_5_6_bundledJRE.exe
77061c8aae0a892d041b8695f38ba2fe91b2844259654bb2e55bf505b9debe27  openfire_4_5_6_bundledJRE_x64.exe
c65ccbf45a69c0babe2876a9c511910d2601ff301539e9a4c3d94dc1b82952c9  openfire_4_5_6.dmg
5990611b18b9ffff5ff46dc8bb398306fc6361893c230ee5d71ad852564dcd49  openfire_4_5_6.exe
1f155e858a924e54b172fd884ccd49521fc55d89260b2e074e2b39b4271667c4  openfire_4_5_6.tar.gz
6df1c063efd674c059323431f786e9e2a70a3c6573e1012e2b56f6db7877d28f  openfire_4_5_6_x64.exe
400269969398c6ed90322ea8d199225b0cdf87a90a840d9aa123c0b941b1cfae  openfire_4_5_6.zip

This release only updates log4j to 2.17.1

sha256sum values

1a8f1516a3d398b7701ec9a1c8b790a9ece8f3ea59265ccce4e769af5d485f26  openfire-4.6.7-1.i686.rpm
11972b17d60b828345b75fa049469085f22b9aa233082f8fb9bcac90ba0876a6  openfire-4.6.7-1.noarch.rpm
d802fbd9b1a4011fe23c6338d77642cfbc813760d1f5c805bc5934881635edfb  openfire-4.6.7-1.x86_64.rpm
4ab20cb022d5068c1dc0c7024350db4ac63b28a757e216e98ee6863d8ec7d253  openfire_4.6.7_all.deb
2157a17479acc12e6392ad10c2c61d38e478438a279c970a15313e1a49cce7ba  openfire_4_6_7_bundledJRE.exe
ac1e91d23742493a4d56f489e52f77ee5f1db138091600f84b406956e6b701ef  openfire_4_6_7_bundledJRE_x64.exe
baae9416e5979a7dc1c44dab156e540152baf3368e8afe838ee70a64dcaf2ca2  openfire_4_6_7.dmg
b76b304dcbca084830d52da900051f837f605ce22411033fae68a00d28dc0c34  openfire_4_6_7.exe
6b2ba7c4976dbd36249269a453eb176d71a1e7f80575951cdd173d0ec4247056  openfire_4_6_7.tar.gz
fec61e4a573faf634336e535c51112ab94c3f09388ea16948b8c6906ebbdf9ef  openfire_4_6_7_x64.exe
1a92b45968719b7de00181d8dcfc5ef10e335b02deafcf7d6a5053a968ed0646  openfire_4_6_7.zip

This release further addresses the log4j CVE

[OF-2353] - Update Log4j dependency to 2.16.0 to address Log4Shell/LogJam.

sha256sum values

507b4899fb1c84b0ffd95c29278eeefd56ac63849bb730192b26779997ada21b  openfire-4.6.6-1.i686.rpm
d2913d913449a9e255b10ea6ee22a5967083a295038c21d3b761bb236c22e0cd  openfire-4.6.6-1.noarch.rpm
02aa7af09286f25fbceef1ea27940e1696ced1e3a6c28b5e0ae094d409580734  openfire-4.6.6-1.x86_64.rpm
3add3c877745dcc6aacd335cfc8fe1674567bb3b28728cfa6c008556c59a9e98  openfire_4.6.6_all.deb
00c5ecbbf725de1093bfe3e5774b8c0e532742435439f70a4435fc5bed828b99  openfire_4_6_6_bundledJRE.exe
4ff92208e62f0455295a8cf68d57e2d9e3ede15c71aaab26cf1a410dce5aba5b  openfire_4_6_6_bundledJRE_x64.exe
2584a6b61f0d9447a868f9bfadb5892d56d854198604b3ace9b638b8c217cac4  openfire_4_6_6.dmg
6cc42bfb60a5f8453c37d980c24c2a5ba48e1e1363ebfcc5d7f2e1deb6da5f17  openfire_4_6_6.exe
6431a22d2dd9f077b9b2ee8949238c0f076ab34d43ee200a6873fa5453630bd6  openfire_4_6_6.tar.gz
ec8da5fdc93065df9bf41c0f4aebd6bb47f1dea11dcc96665ac0105f035378b2  openfire_4_6_6_x64.exe
af68252b98b8af6afb0753b4054adcf4cab1968579eaaf644d4da663e9461dce  openfire_4_6_6.zip

This is a release addressing the log4j CVE

OF-2353 -Update Log4j dependency to 2.16.0 to address Log4Shell/LogJam

sha256sum values

247f0769e0a449c698ac9c23b658a02131ac6f774f4394dc9bb4e7f114159cc8  openfire-4.5.5-1.i686.rpm
4603f92ce9822d1f43d27a9e15b859232cd09f391e9aeef0b99a782a03ecd12e  openfire-4.5.5-1.noarch.rpm
9df54cbef30664635ed2977a21beded56fa120c5ff9e89b4cfa7466171344517  openfire-4.5.5-1.x86_64.rpm
0815f07094fcfaf4e17aca3ea26f42835b5ff1b486475aff6b743e914709e788  openfire_4.5.5_all.deb
dff2e81da7457e3d8c1ee9e23ff43dd812f56db09df53588df7a5ea5622b1e6e  openfire_4_5_5_bundledJRE.exe
96c2a4f5ed94dda76942ec7e540430c505448a2625a10f52cdc91c2dae0f720a  openfire_4_5_5_bundledJRE_x64.exe
a1ddd675b24b661186645786d1489cb6d80c90c2cae178992af509b5241fb275  openfire_4_5_5.dmg
971b97bc9d405a03d2c3fba51a698cf92397b24104b28fec06b993b6d52568ce  openfire_4_5_5.exe
a5f199bf2347725b952a995c1cfbeb1b8e45c9a26c177100669eeed7679da742  openfire_4_5_5.tar.gz
b5b55c5938b430fa50c702da6b8336be7f79d2c97eb09623dc0c9bd59663aead  openfire_4_5_5_x64.exe
44f90a4f4f7ecebd7cffadc7f108e4bcb8b70dc77b36698d48efaf3eb7650c91  openfire_4_5_5.zip

Changelog

OF-2277 Numbering in room enumeration is off by one.

OF-2273 Disabling presence broadcast will cause MUC join failure

OF-2268 Concurrency issue when starting JMX manager

OF-2267 Cannot browse MUC rooms of services other than the first one.

OF-2351 Update Log4j dependency to address LogJam

OF-2271 Add field type returned data form fields

sha256sum

926e852abfe67970a4a64b7a58d16adbd3ae65269921288909d2a353457ac350  openfire-4.6.5-1.i686.rpm
5041fd66f5cf4642d25012642d827ad80c40057ba66f79aad04918edc94085ec  openfire-4.6.5-1.noarch.rpm
f1d7ed2d5d5bbd12c3af896329df48f97b73ae5435980b524248760a246552f6  openfire-4.6.5-1.x86_64.rpm
da113f737514457209194024f57a90f52f499fefbf0a9eb3e3d888b24f214ece  openfire_4.6.5_all.deb
c16e13348767b489aef905d912eafca9650428af16a729b63a208fdbe97c9783  openfire_4_6_5_bundledJRE.exe
e03cd4e5b2a76b203540580ca2714541ee86b1ef3b677d5c312d099567674f2d  openfire_4_6_5_bundledJRE_x64.exe
28d628db9cce3cfb7acfa19977235b569729bcebff65a511dd882a4c1b554d6c  openfire_4_6_5.dmg
cb1c4a5f888cbeeb6bbfd29460c8095941cecddd8c5f03b3d3f1ca412a995e81  openfire_4_6_5.exe
fcc3d45e9b80536b463fedbb959ff1e4f5fc5cef180502f6810c0f025a01f4ac  openfire_4_6_5.tar.gz
fe216d1eecb23050ebbf28f7afa8930ca167d99516051c3f5e03d545e183cf4c  openfire_4_6_5_x64.exe
fd0f853b249a8853da51b056f1e6b31d04c49763394321dbd60abb8cef9df940  openfire_4_6_5.zip

Improvement

• [OF-2349] - Admin console should show \(full\) default value for system property
• [OF-2340] - send stanzas that are 'responses' through PacketRouter, not RoutingTable
• [OF-2320] - MUC room avatars fail
• [OF-2317] - Prevent NPE when admin page obtained without session
• [OF-2316] - Make S2S fast-discard timeout configurable
• [OF-2307] - Changing MUC nickname to one that's already used by your other resource
• [OF-2303] - Remove unused UserManager field from SessionManager
• [OF-2298] - Use status code 333 when MUC occupants leave due to clustering error
• [OF-2287] - Add MUCEventDelegate to interface
• [OF-2283] - Show distinct servers when looking at remote S2S details
• [OF-2276] - Broadcast status codes when privacy settings of a MUC room change
• [OF-2275] - When joining a MUC room that has logging enabled, status 170 should be returned.
• [OF-2256] - Add CORS headers to websockets
• [OF-2252] - Reduce log level for BOSH request that time out
• [OF-2251] - Threadpool for BOSH network-IO should be configurable
• [OF-2248] - BOSH configuration should go into SystemProperty instances
• [OF-2247] - BOSH session configuration should not be mutable
• [OF-2246] - Allow backup delivery to be disabled
• [OF-2239] - Make it easier to cache plugin class instances
• [OF-2212] - Allow admin console's cert to be auto-updated
• [OF-2200] - Apply alternating row background color scheme to group members list.
• [OF-2175] - Reduce verbosity of anonymous users trying to authenticate errors
• [OF-2129] - Remove Flash support
• [OF-2115] - Remove unused webdav servlet
• [OF-1840] - Improve admin console log viewer
• [OF-264] - Add group selection field in Create New User page

New Feature

• [OF-2286] - Allow log file to be downloaded from Admin Console
• [OF-2158] - Update notifications should include cluster node reference

Sub-task

• [OF-2272] - Remove notion of 'remote' and 'local' MUC entities
• [OF-2230] - On witnessing another node leaving a cluster, generate leave presence about all MUC participants from that node to all node-local MUC participants
• [OF-2228] - On Cluster Join, repopulate the newly acquired clustered cache with the local copy of items
• [OF-2227] - On Cluster Leave, repopulate the new blank local cache with the local copy of items contributed to the clustered cache

sha256sum values for artifacts

6cf4cc7a0a834b23cdea0ade198c724ee4f0be5560f1d16321414497c4f5903b  openfire-4.7.0-0.2.beta.noarch.rpm
ceee17f76d2645f2fcc29f5a84efbcc7fc376f7e01ef05ba28b65e850fff96f8  openfire_4.7.0.beta_all.deb
71e1a373420e048ee4c5921bcb54b4efa2357aaf9e57501284f20f0edeaa0428  openfire_4_7_0_beta.dmg
7d1f248e03c60dbb071eeee6abf671932c47e154fae888bee9293f875323fdd7  openfire_4_7_0_beta.exe
44bebac3da5f5d5d00270dcc303b34b6efce4c7c2bd1bfd4520827f6e8a58549  openfire_4_7_0_beta.tar.gz
72f1cd7dc2015ec70902b3b18a5248651a6e3091ba12ebf8d2767834b057c17f  openfire_4_7_0_beta_x64.exe
76e4cf8da32b062ed719812792849bcfc475a22208e721a5f1b7dcddda45a4a4  openfire_4_7_0_beta.zip

sha1sums

42bff5adc51a2347952f436fed25b5013ee0a146  openfire_4_6_4.dmg
d1f85a2854e42ae48e4000480fbbb55e39f84e56  openfire-4.6.4-1.i686.rpm
1a5c43e904726192e2abc36858eb2df0b17244a2  openfire-4.6.4-1.noarch.rpm
689c046afdbd63e22615a599f076851a49af50cd  openfire-4.6.4-1.x86_64.rpm
18117c3fee17d1b6d704b85c42d7d3386e520983  openfire_4.6.4_all.deb
36b1953db86406a1eb2344d1b0ffada0f57b8b32  openfire_4_6_4_bundledJRE.exe
72de355806bb2ce414655cf0da2801ce47032f03  openfire_4_6_4_bundledJRE_x64.exe
3086b70e04077b56dbb59931a87937e619995f0b  openfire_4_6_4.exe
7dab9c9a61456508793ede0ab13c7fe1f18e12d1  openfire_4_6_4.tar.gz
4f05ea94729800bbc6272b8ff98f3c8aa81d9207  openfire_4_6_4_x64.exe
792f68efc3943658e71586dbe305420499aab6b2  openfire_4_6_4.zip
9b3e031e4b064b5e4c618476b5429e077d4c1abb  openfire_src_4_6_3.tar.gz
bd79eae0079cba4a84cc9d1e249a62c3f45d6539  openfire_src_4_6_3.zip

Bug

• [OF-2266] - Occasional test failure for LoginLimitManager
• [OF-2265] - Websocket fails to deliver certain errors
• [OF-2262] - Admin console does not show MUC rooms that are not in memory
• [OF-2241] - IQVersionHandler fails to handle bosh/websocket clients
• [OF-2240] - Self-presence status not added to kick presence
• [OF-2190] - Inconsistent normalization of MUC room name

Improvement

• [OF-2264] - Bump commons-io from 2.6 to 2.7
• [OF-2263] - Do not list every page of MUC rooms
• [OF-2261] - Re-word MUCs cleaned from memory option in admin console
• [OF-2260] - Show (full) name of group members on admin console
• [OF-2259] - Increase startup speed with large amounts of MUC rooms
• [OF-2258] - Make thread pools configurable
• [OF-2257] - Expose state of thread pools via JMX
• [OF-2253] - Return IQ auth error when sending data before being authenticated
• [OF-2243] - Version Check threads should not sleep in the TaskEngine
• [OF-2083] - Do not store offline messages that are already stored
• [OF-2082] - Consider using OfflineMessage instead of Message in OfflineMessageListener

Release notes - Openfire - Version 4.6.3

Bug

OF-2214 DbConnectionManager should not default to DB2 for unknown database types.

OF-2210 Session Destroyed event is not triggered

OF-2207 Creating new room on cluster generates exception on one node

OF-2205 Race-condition in EntityCapabilitiesManager when deleting user

Improvement

OF-2217 Enable Result Set scroll support for Oracle

OF-2216 Enable SQL transaction support for MySQL

OF-2215 Use MySQL database scripts for MariaDB

OF-2201 Better error when LDAP fails due to missing HTTP session

OF-2192 Add Client Version column to Sessions page

New Feature

OF-2209 MUC 'ghost' users should be detected/removed

sha1sums for release artifacts

df31aa19f035454cbddb91ac461e17ab5afe9d0e  openfire-4.6.3-1.i686.rpm
5c7d95f508426f9ffbe4140c7f217bb5308456fe  openfire-4.6.3-1.noarch.rpm
72a0f054cbb22ca89b3776889ec6f23ba16a2744  openfire-4.6.3-1.x86_64.rpm
28ceb205504e7f58cea30a21e8d8fb3ff197f18d  openfire_4.6.3_all.deb
130b1182384b4ebf08826b4efd84ab83d968a9bd  openfire_4_6_3_bundledJRE.exe
2e25f3924eadd0e1992ccefb2ca2b955801e1d2c  openfire_4_6_3_bundledJRE_x64.exe
c5c2035dec1a9aced5d4979b83da64686e2575a1  openfire_4_6_3.dmg
57e2a211dcb8d93c7362282f469bdc7ee7e4d06d  openfire_4_6_3.exe
ab4f6a0ab27dd642214099ea57a6ac4e2eb6d75f  openfire_4_6_3.tar.gz
21785833b7b1ec99f9174fdb625529dacd4f832c  openfire_4_6_3_x64.exe
de5bff5f8b6963d8c8e2d25120922a3395dd0df7  openfire_4_6_3.zip
30e97fa43ba34dd3369c7664c40dd087db0e6879  openfire_src_4_6_3.tar.gz
6acb86fee6f64b940089eba571a3136caa08df9d  openfire_src_4_6_3.zip

Changelog:

Bug

• [OF-2196] - Fix dependencies for PluginServlet on Java 11
• [OF-2197] - Slash-star block comment fails for SQLServer

Improvement

• [OF-2155] - X-Frame-Options header in Admin returns an invalid value
• [OF-2195] - Add Git SHA to Admin

sha1sums

678f7ca008ed8347f4b49efcac3ef68cde9814ed  openfire-4.6.2-1.i686.rpm
10db897faff66be5228fde858da7618becee1251  openfire-4.6.2-1.noarch.rpm
29c7aa59cac59eb15b0824e5a7d1dde0ce57976b  openfire-4.6.2-1.x86_64.rpm
245e326efbcf02749a243ef7bee79a55b6b5afb3  openfire_4.6.2_all.deb
1e9f0eb71650313f65848d376b600d6ce2d87db7  openfire_4_6_2_bundledJRE.exe
1f80ba8835c55f7290ac05f2b88cffdd3a993616  openfire_4_6_2_bundledJRE_x64.exe
d9c0956ad8fcc28e27b92175e6931841f76b0935  openfire_4_6_2.dmg
2c610a40648547aa37093fa0d73ce2e9eca4a0af  openfire_4_6_2.exe
c03ede9ee3693cccc5f95d2155637d0269567edf  openfire_4_6_2.tar.gz
9192fcf7ac6abca3578e1720155723da0792ba98  openfire_4_6_2_x64.exe
f73c32f9a3b4c44b453f9f5d939b99238136d00f  openfire_4_6_2.zip
a9a2dab04c03cccb5b1b371602dbea87dc860fd3  openfire_src_4_6_2.tar.gz
8bb3f1f83cf0671924adde9b3809e9e71ed0a3ed  openfire_src_4_6_2.zip

Artifact sha1sums

8fe60c2ac0be32f497648a6f129dec89ec858533  openfire-4.6.1-1.i686.rpm
c7e949d21aecb488617c8effe31f5831d25ed912  openfire-4.6.1-1.noarch.rpm
a28e01c896d40f756a03c2e7cf8ec48ef45af782  openfire-4.6.1-1.x86_64.rpm
6504c08821415e8e053ca361f78e899f6c9ddf7e  openfire_4.6.1_all.deb
2d76d5ead560b49dda95cf9305e9d47f67ef2349  openfire_4_6_1_bundledJRE.exe
1423d1aa5ca6d9e4169b5f775bc11b5f6b4fcf8c  openfire_4_6_1_bundledJRE_x64.exe
a4c7f7d4bd82d2eecf6791befcc8285d172740ad  openfire_4_6_1.dmg
627d062dec364bc2f4e6a8b54d171c599525edde  openfire_4_6_1.exe
84915336194c72622d96b9a0a20d9418397b93d6  openfire_4_6_1.tar.gz
89c6cf5ff54718eefee21292dc63f304ed8d6e2c  openfire_4_6_1_x64.exe
8be2dcb848cd501f20bff285ffa68a824d5f7d32  openfire_4_6_1.zip
602f9b6dc2f3b95cb25decf1026196d9b4a4c348  openfire_src_4_6_1.tar.gz
8354eb3fd548221bd76f5d5096766e04bbed36be  openfire_src_4_6_1.zip

4.6.1 -- January 6, 2021

Bug

• [OF-763] - Create property to control console session expiration
• [OF-2077] - NullPointerException with Pubsub(PEP?) and clustering
• [OF-2112] - IQRouter throws NPEs when routing stanzas without 'from' attribute
• [OF-2113] - Docker builds should not include locally built resources
• [OF-2131] - NPE in MUC in clustering
• [OF-2146] - MUC affiliation and role changes aren't always sent to the affected occupant
• [OF-2148] - Implicit narrowing conversion in compound assignment
• [OF-2152] - Stanzas dispatched from MUC room can have invalid 'from' address
• [OF-2157] - SequenceManager generated IDs are unreliable whilst clustering
• [OF-2159] - Openfire re-uses the origin-id for stanza-id
• [OF-2161] - Stable/Unique stanza ID for PMs should have a 'by' that reflects the room
• [OF-2163] - MUC Stanza post-processing might unintentionally expose real addresses
• [OF-2168] - Unable to broadcast (some) presence stanzas in MUC.
• [OF-2169] - LDAP VCard failure when user doesn't have attribute
• [OF-2173] - NullPointerException when joining a room that has no subject
• [OF-2179] - MUC, S2S and Clustering: IllegalStateException in MUC presence broadcast
• [OF-2180] - User has nickname in room, but not a role
• [OF-2191] - set server broadcast message to type headline

Improvement

• [OF-2114] - Upgrade Bouncy Castle libs to 1.66
• [OF-2130] - Improve usefulness of error messages when configuring LDAP/AD integration
• [OF-2151] - Improve exposure of cluster location in admin console
• [OF-2153] - Gracefully handle SM resumption requests on other cluster nodes.
• [OF-2162] - Add 'ofrom' to MUC private messages
• [OF-2170] - LDAP UserDN cache should contain negative results
• [OF-2172] - Include query details in DNS exceptions
• [OF-2174] - Cache DNS SRV lookups
• [OF-2177] - CacheableOptional should have a toString
• [OF-2182] - Update Jetty to 9.4.35
• [OF-2183] - Update ant to 1.10.9
• [OF-2184] - Update bouncycastle to 1.68
• [OF-2185] - Update guava to 30.1
• [OF-2186] - Update apache httpclient to 4.5.13

Task

• [OF-2111] - MUC Maximum batch size setting resets on reboot