Changelog for openfire-doc-3.10.3-4.1.x86_64.rpm :

* Wed Nov 18 2015 ecsosAATTopensuse.org- update to 3.10.3 Bug [OF-332] - ldap.connect.timeout not working with SSL connection [OF-477] - SASL server in OF creates digest-uri based on xmpp.fqdn but it sends xmpp.domain to the client [OF-881] - NIOConnection Thread Deadlock when two clients in each others roster simultaneously disconnect [OF-887] - ldap.readTimeout not used when LDAP getContext() is called for queries [OF-903] - ISE attempting to write data to a closed/closing session [OF-918] - Character encoding issue in BOSH [OF-926] - Clients can\'t authenticate using LDAP SSL [OF-938] - BOSH packet namespace issue [OF-949] - Offline message delivery failures [OF-954] - Openfire clustering fails to correctly sync MUC room occupants [OF-966] - failure tag not closed for TLS Negotiation Failure New Feature [OF-933] - Update websocket support per RFC 7395
* Sun Jul 05 2015 ecsosAATTopensuse.org- update to 3.10.2 Bug [OF-992] - Downgrade Apache MINA to version 2.0.7 to fix performance and 100% CPU issue [OF-924] - Enable LDAP SSL Connection Pooling- changes from 3.10.1 Bug [OF-881] - NIOConnection Thread Deadlock when two clients in each others roster simultaneously disconnect [OF-883] - High CPU usage and hangup after a few days of running [OF-889] - NPE on Admin Console (client sessions listing) [OF-907] - SSLv2 Hello is rejected; prevents some clients connecting [OF-909] - BOSH response should return ack attribute [OF-910] - MUC de-synchronization issues [OF-916] - Deadlock with MINA sslFilter
* Fri Apr 24 2015 ecsosAATTopensuse.org- update to 3.10.0 Bug [OF-116] - Add a text explaining the path used for http-binding [OF-397] - Do not deliver offline messages to clients with negative priority [OF-405] - Openfire fails to verify chained certificates [OF-444] - Jingle Nodes plugin should use lowercase in i18n file\'s name [OF-460] - Debug log is not saving its state between restarts [OF-474] - OpenFire still provides entry forms for already-registered room users [OF-560] - Restore or drop support for Pack200 compression [OF-565] - ConnectionHandler has parsing problems due to use of hashcode under heavy load. [OF-629] - Remove XMPP Sessions [OF-670] - MUC user count not kept in sync across cluster nodes [OF-736] - Openfire should return SASL failure, when not using base64 encoding [OF-754] - Lock out user option works incorrectly in some cases [OF-778] - Setup LDAP broken during initial openfire configuration [OF-786] - Muc - grant membership: nickname is not stored [OF-794] - Client sessions for failed cluster nodes are not being cleaned up properly [OF-795] - Unable to disable Message Carbons after they have been enabled by the client [OF-796] - Plugin version check should be numeric rather than textual [OF-799] - Changing server 2 server idle settings has broken UI [OF-800] - Encryption setting wrong when adding a property via System Properties page [OF-802] - MUC Invites result in 404 [OF-803] - Message Carbons may throw org.dom4j.IllegalAddException, resulting in disconnection [OF-804] - Joining a locked MUC room should return instead of [OF-805] - [MUC] OF does not return all affiliated users when requesting multiple affiliations [OF-806] - Flash client connection closing with invalid_namespace error [OF-807] - S2S whitelist form saving domains with \"-\" without it [OF-811] - Remove deprecated \"xml-not-well-formed\" error in favor of \"not-well-formed\" [OF-812] - Monitor plugin fails to handle start date properly [OF-813] - Memory leak [OF-818] - Message routing to bare JID can route to negative priority resources [OF-819] - IQs (e.g. XMPP Pings) of type error get falsely routed to IQ.createResult() which results in an Exception and connection termination [OF-822] - If a non-occupant sends a request to an occupant, a MUC service MUST return a error. [OF-823] - Numeric overflow in MUCPersistenceManager when loading history older than 24 days. [OF-830] - LDAP shared groups disappear after some time [OF-832] - Monitoring plugin fixes [OF-837] - PubSub should return non-persistent items (last published item) [OF-839] - Forwarded extension should not overwrite extension namespaces of the forwarded message. [OF-840] - BOSH does not include [OF-845] - XSS vulnerability in Monitoring Service pages in Admin Console [OF-849] - Error decoding subjectAltName DERTaggedObject cannot be cast to ASN1Sequence [OF-853] - XEP-0077 Registration must return if username or password are unspecified. [OF-855] - Openfire looses messages when multiple senders send messages to the same receiver that looses connection [OF-857] - c2s stop responding, new connections hang [OF-859] - Remove static service id reference in Node.class [OF-860] - No MUC status code 110 (self-presence) after joining a room with more than one user [OF-861] - Disable SSLv3 by default as per POODLE vulnerability [OF-863] - Multiple NPEs encountered when running under high load/latency in cluster mode (via hazelcast plugin) [OF-864] - Cleanup routes from defunct cluster member servers [OF-866] - Unexpected \"session not found\" errors under load [OF-870] - stanza with multiple \"to\" attributes generated after restart [OF-874] - disco#items request SHOULD return connected or available resources [OF-875] - Roster requests to bare JID of the user are not responded [OF-876] - IQRosterHandler does not respect error cases in RFC 6121 § 2.3.3. [OF-877] - BOSH connector does not properly restart after a configuration change [OF-878] - NPE in MINAStatCollector [OF-881] - NIOConnection Thread Deadlock when two clients in each others roster simultaneously disconnect [OF-884] - Auditor uses wrong hour for file rotation [OF-885] - Use non-blocking, async API for BOSH servlet [OF-886] - Openfire fails to parse CDATA when it ends with sequence ]]]> [OF-888] - s2s locks up with gmail [OF-890] - BOSH client connections sometimes failing [OF-894] - Openfire tries to close a closing session over and over. [OF-895] - Update postgresql driver to support PostgreSQL 9.4 [OF-896] - Default client compression inconsistency [OF-897] - GZipFilter fails on Async BOSH servlet Improvement [OF-189] - do not use com.sun.
* classes [OF-593] - LocaleUtils.java_dots_ to_underscores_i18n _bundles [OF-797] - Move ant-tasks in subdirectory (and delete ant.jar) [OF-801] - Extend ant build script to support multi-platform binaries that do not have a file extension [OF-828] - Add the MUC service plugin to Openfire plugins [OF-835] - Prevent fast clients flooding Openfire causing OutOfMemoryError [OF-838] - Allow for custom lib and conf file placement [OF-841] - Add a note about UAC to the Installation Guide [OF-842] - Additional properties in User Properties view [OF-847] - Upgrade bouncycastle from 1.50 to 1.51 [OF-850] - Improve initialization state for JiveGlobals [OF-869] - Update Jetty to 9.2.x version [OF-893] - Mutual Authentication Broken for BOSH New Feature [OF-69] - Add \"Groups user belongs to\" column to the User Summary page [OF-179] - Allow MUC permissions to be set using groups [OF-250] - Allow to configure the groups of a user from the user profile [OF-324] - Offline Email Notification [OF-843] - Upgrade clustering components for new Session API method Task [OF-421] - Update MINA library to latest version [OF-466] - Drop Java 5 support [OF-709] - Update Jetty from 7.4 to 9.1 [OF-831] - A typo on Database Settings page during setup [OF-901] - Update bundled JRE to 1.7.0_76
* Fri Dec 19 2014 ecsosAATTopensuse.org- insert requirements for building in openSUSE_13.2 xerces-j2-xml-apis xerces-j2-xml-resolver
* Wed Jun 18 2014 ecsosAATTopensuse.org- update to 3.9.3 Openfire Bugfix [OF-2] - LocalOutgoingServerSession logs connection failures over verbosely [OF-746] - Use update-alternatives to set JAVA_HOME on debian [OF-779] - fetching from LDAP should escape results [OF-780] - Update reCaptcha for HTTPS [OF-781] - ConcurrentModificationException in kickPresence [OF-782] - Wrong URL generated for editing groups with space in the names [OF-783] - Apply encryption to secure properties during setup [OF-784] - Possible NullPointerException in MessageRouter logic [OF-787] - TLS server to server connections are not working with 3.9.2 [OF-788] - UserService plugin should not reset group properties when adding user to group [OF-789] - Invalid token in Pubsub item purge SQL [OF-791] - Joining new MUC room results in a 404 error Openfire Improvement [OF-744] - Replace package.html with package-info.java
* Sat May 03 2014 marcelloceschiaAATTusers.sourceforge.net- update to 3.9.2 Openfire Bugfix [OF-24] - \"Issue with IQ subscription=\"remove\" [OF-114] - Clearing cache can lock up MUC [OF-183] - Bad-namespace prefix is actually invalid-namespace? [OF-193] - Last logouts are not recorded when server is shut down [OF-297] - fix: mutual roster deletion problem [OF-303] - fix Flexible Offline Message Retrieval (XEP-0013) support [OF-455] - Some unicode pattern in status message can break the session connection [OF-471] - Error integrity of the compressed stream [OF-544] - MUC change affiliation/role - admin IQ item processing bug [OF-562] - Broadcasting roles for MUC are not loaded correctly from DB [OF-633] - Current OfflineMessageStore logic discards valid MUC invites [OF-640] - log4j doesn\'t pick up ${openfireHome} [OF-669] - Visually failed first login to Admin Console [OF-686] - Anonymous registration permits name with javascript payload [OF-687] - MUC topic permits javascript payloads [OF-692] - Node column in ofSecurityAuditLog table should accept NULL entries [OF-693] - openfire init script target reload should not call restart [OF-699] - Race condition during cluster initialization (Hazelcast plugin) [OF-705] - Admin console (XSS) vulnerability lets attacker change admin password or create new admin [OF-706] - Openfire does not close the stream with a stream error if the namespace is not \'http://etherx.jabber.org/streams\' [OF-717] - The BOSH implementation should include a \'from\' attribute in its session creation response. [OF-720] - Roster deletion of userB by userA should not remove userA from userB\'s roster [OF-722] - Openfire should save XEP-0184 delivery receipts as offline message [OF-725] - Openfire must return a service-unavailable error when blocking an IQ of type get or set because of a privacy list. OF should return error if a message stanza is blocked [OF-731] - HybridUserProvider does not initialize correctly [OF-733] - OF should not silently close a connection, when receiving a message without \'to\' attribute [OF-734] - Openfire cannot deal with SASL [OF-735] - Openfire should return SASL failure, when requesting an unknown mechanism [OF-741] - Debian Installer should allow Java7 as a prereq [OF-742] - MUC Service sends \"disturbing\" service messages. [OF-743] - MUC room does not return its identity or features, when querying for room info [OF-745] - Use TLS-dialback even if that mechanism is not advertised [OF-746] - Use update-alternatives to set JAVA_HOME on debian [OF-751] - NPE on PubSubEngine#shutdown on server shutdown [OF-753] - Improve init script to work with opensuse and fix logic with PID file [OF-755] - Monitoring plugin database fixes [OF-756] - Fix Postgres purge process error [OF-757] - Allow s2s message of subdomain of XMPP domain when no components are found [OF-759] - Update bundled postgresql driver to PostgreSQL 9.3 JDBC4 (build 1101) [OF-760] - MUC service does not include \"self-presence\" status code 110 [OF-761] - OF must return instead of when joining a MUC room without nickname [OF-769] - Fix typo in monitoring plugin [OF-770] - CVE-2014-2741 Uncontrolled Resource Consumption with XMPP-Layer Compression [OF-772] - IQ type=\"result\" getting java.lang.IllegalArgumentException [OF-774] - Needless code in AuthorizationManager Openfire Improvements [OF-163] - fix RosterItemProvider.getItems() for Oracle [OF-298] - EntityCapabilityManager should not use a clustered cache [OF-309] - Privacy Lists drop messages silently [OF-411] - Admin or owner should be able to join a room when it has reached maximum occupants number [OF-464] - Verify if there were packets pending to be sent and decide what to do with them [OF-569] - Add deluser adhoc command [OF-592] - build.xml_chmod_executables.patch [OF-594] - PluginServlet.java_support_registering_servlets_programmatically.patch [OF-729] - Upgrade Hazelcast plugin to latest release version (3.1.x) [OF-730] - Migrate operational configuration properties from openfire.xml to DB [OF-749] - Upgrade bouncycastle library from 1.49 to 1.50 to keep up with JitsiVideobridge [OF-764] - Group chat history (MUC) should match configuration after server restart [OF-771] - MUC service should flush recent history before shutting down Openfire Features [OF-125] - Restrict discovery of rooms based on users membership [OF-206] - Add HybridUserProvider [OF-347] - The domain should add support for Last Activity requests [OF-638] - Add support for XEP-0202: Entity Time [OF-682] - Add Portuguese translation [OF-714] - Add ability to encrypt properties so they are encrypted in the db and do not appear in the admin console. [OF-758] - Add support for XEP-0280 \"Message Carbons\" [OF-775] - Improve logging of invalid presence show Openfire Tasks [OF-728] - Update installation package with the latest Java JRE Openfire Sub-task [OF-10] - Pubsub event message with SHIM information holding multiple subscriptions should have the name=\'SubID\'. [OF-103] - [MUC] Allow nicknames to be used more than once in the same room
* Thu Feb 06 2014 ecsosAATTopensuse.org- update to 3.9.1 Openfire Improvements [OF-697] - Update bundled MySQL JDBC driver to the newest 5.1.x version [OF-715] - Update Openfire bouncycastle library from 1.46 to 1.49 Openfire Features [OF-727] - Configuration option to disable presence broadcast for other resources on single user Openfire Tasks [OF-513] - Update installation package with the latest Java JRE (1.7.0_2 or higher)
* Thu Feb 06 2014 ecsosAATTopensuse.org- update to 3.9.0 Openfire Bug Fixes [OF-454] - Openfire does not send user presence information to all resources of the user [OF-496] - javax.net.ssl.SSLException: Received fatal alert: bad_record_mac [OF-676] - Pressing on workgroup in Fastpath causes an exception [OF-677] - Monitoring Plugin - \"Null\" reappearing in Archive for Message Body [OF-678] - Monitoring Plugin - Ever expanding Index [OF-680] - Packet Filter Plugin does not allow creation of wildcard rules [OF-718] - Fix Debian initscript to support more JAVA_HOME paths [OF-719] - Userservice plugin leaves user roster items in DB when user is deleted Openfire Improvements [OF-654] - Openfire failes to create tables on MySQL 5.6 [OF-679] - Packet Filter - Add option for \"All Groups\" and auto creation of rules based on Openfire Group Settings [OF-700] - Add a method to refresh a MUC room [OF-701] - Better group properties handling [OF-703] - UserService Plugin - Auto-create shared groups if not existing [OF-704] - Make LDAP connection timeout configurable [OF-715] - Update Openfire bouncycastle library from 1.46 to 1.49 Openfire New Features [OF-681] - Add ability to search plugin to be able to restrict searching for users to only the group a user is in [OF-716] - Add Jitsi Videobridge plugin to Openfire plugins Openfire Task Fixes [OF-698] - Bump version on all bundled openfire plugins, bump min version due to distributing java6 binaries now
* Sun Jun 16 2013 ecsosAATTopensuse.org- update to 3.8.2 Openfire Improvements [OF-342] - Add CORS headers to HTTP-Binding/BOSH [OF-393] - Group names with <> should be properly HTML escaped [OF-650] - Add support for X-Forwarded-For (XFF) headers from proxied BOSH clients [OF-655] - Add configurable JMX support [OF-657] - Merge Atlassian Crowd provider into Openfire core [OF-660] - Enhance the sessions pages (summary/detail) in the admin console [OF-674] - Add roster management capabilities to userservice plugin Openfire Bug Fixes [OF-14] - Subscriptions to pubsub node should be based on the JID as supplied, not the bare JID [OF-108] - Admin Console is adding BR tags when editing system property containing string with newlines [OF-453] - Ensure HttpSession is terminated properly by session reaper [OF-465] - Kicking MUC occupant on server is not propagated to clients [OF-476] - FlashCrossDomainHandler causes infinite loop under some circumstances [OF-477] - SASL server in OF creates digest-uri based on xmpp.fqdn but it sends xmpp.domain to the client [OF-595] - Security audit logviewer is not escaping tags [OF-646] - XmppDateTimeFormat is unable to parse date Strings [OF-653] - BOSH deadlock [OF-656] - Fix crossdomain.xml for BOSH [OF-659] - JDBCUserProvider returns all users for a paginated search [OF-661] - MUC Topic/Subject change not propagated to other cluster nodes [OF-664] - Monitoring archive shows null in room chat logs [OF-665] - MUC changes/activities do not propagate across cluster nodes [OF-666] - Pubsub items should be created using cluster time rather than local time [OF-667] - Monitoring plugin bad SQL for upgrade [OF-668] - Pubsub items (persistent) may be dropped in certain cases [OF-671] - XSS in server2server.jsp [OF-673] - Should include a \'to\' attribute in initiating s2s streams Openfire New Features [OF-651] - Monitoring plugin should have an option to purge and restrict
* Wed Apr 03 2013 ecsosAATTopensuse.org- update to 3.8.1 Openfire Improvements [OF-597] - Increase performance of fetch last pubsub item for a node [OF-614] - Add /usr/lib/jvm/default-java to the collection of default locations to look for a JRE Openfire Bug Fixes [OF-102] - Deleting user does not clear out ofUserFlag [OF-415] - Group disappears from the Group Summary view after editing its details [OF-596] - Last published item is not loaded when leaf node is loaded into memory. [OF-610] - Restore shared group support for read-only GroupProviders (LDAP) [OF-612] - Upgrade bundled JRE to last version... [OF-613] - RPM build failure with [OF-615] - Improve Robustness of loading MUC service at startup [OF-616] - Can\'t see newly created groups in Admin Console after the upgrade to 3.8.0 [OF-617] - Fastpath plugin fails to build [OF-618] - Error in Admin console, MUC [OF-619] - GoJara plugin library has Java-6 code [OF-620] - JustMarried plugin library has Java-6 code [OF-621] - JustMarried plugin throws NullPointerException [OF-623] - PubsubPersistenceManager does not load nodes properly if the hierarchy has more than two levels. [OF-624] - Illegal JID when configuring a created MUC room [OF-627] - Update rpm bundled JRE 1.6u41