Changelog for openfire-doc-4.2.3-1.1205.i586.rpm :

* Fri Apr 27 2018 ecsosAATTopensuse.org- update to 4.2.3 Bug [OF-1191] - Client certificate authentication with BOSH not working in Openfire 4.0.x [OF-1283] - SANCertificateIdentityMapping - Unable to parse a byte array (of length 42) as a subjectAltName \'otherName\'. It is ignored. [OF-1464] - Can\'t update plugins via Admin Console [OF-1481] - NPE during bind (connection already null) [OF-1482] - Monitoring plugin: MAM query response for MUC should have a \'from\' [OF-1483] - Monitoring plugin: ClassNotFound at startup [OF-1494] - SAN \'xmppAddr\' OIDs are not properly encoded in generated certificates. [OF-1502] - CallbackOnOffline plugin is using wrong version number scheme [OF-1505] - TLS cert admin console page throws Exception [OF-1509] - Stream Management increments should be atomic [OF-1518] - Stored XSS in Property Name in Security Audit Viewer Improvement [OF-1490] - Update HTTP File Upload Plugin\'s component implementation. [OF-1493] - Allow admins to retrieve a PEM representation of installed certificates [OF-1501] - Use \'most appropriate\' certificate when multiple are available. [OF-1507] - Handling of S2S stream errors. [OF-1519] - Add a section about firewall into Installation guide
* Sat Feb 24 2018 ecsosAATTopensuse.org- update to 4.2.2 Bug [OF-1440] - The Group Chat Administrators web page has blank JIDs [OF-1460] - ClassCast Exception on admin console sessions listing when running hazelcast [OF-1468] - Group Chat History returns one message too many [OF-1470] - WebSocket endpoint should allow null path [OF-1478] - Hazelcast Plugin Memory Leaks [OF-1480] - LDAP auth fails with clustering plugin New Feature [OF-1469] - Implement XEP-0215 External Service Discovery Task [OF-1466] - Update bundled JRE with the latest version Improvement [OF-1454] - Add generic mapping function to AuthorizationBasedUserProviderMapper [OF-1455] - Allow for bulk XML property migration [OF-1461] - Making fastpath plugin compatible with openfire meetings [OF-1471] - Terminate streams upon invalid XEP-0198 acknowledges.- fix build for openSUSE Leap 15.0 and Tumbleweed
* Sun Dec 17 2017 ecsosAATTopensuse.org- update to 4.2.1 Bug [OF-1254] - Database update scripts for 25 set version 24 [OF-1450] - Some admin console text is hardcoded [OF-1451] - Support for SNAPSHOT plugin versions Improvement [OF-1447] - Improve deployability of Maven artifacts to public repository. [OF-1448] - Don\'t require i18n source files to be encoded. [OF-1452] - Updated Russian Translation- changes from 4.2.0 Sub-task [OF-210] - Add support for Roster Versioning (aka XEP-0237) [OF-548] - Find maven-managed artifacts to replace third-party libraries. [OF-549] - Create \"XMMP Server\" module [OF-552] - Create \"Webadmin\" module [OF-553] - Create distribution module(s). [OF-554] - Create parent plugin module [OF-555] - Create plugin modules Bug [OF-394] - Shouldn\'t show an exception when creating room with illegal characters in JID [OF-1134] - JustMarried: Allow roster alias to be changed [OF-1145] - Avatar Resizer plugin issues when using LdapVCardProvider [OF-1159] - System Property Encryption is not cluster aware [OF-1193] - Avatar resizer plugin: ClassNotFoundException [OF-1208] - Option to block anonymous logins from sending s2s packets [OF-1250] - Old DWR causes CSRF, XSS in Admin Console [OF-1262] - Error message for failed login on admin console contains moderator verbage [OF-1308] - Openfire not closing stream gracefully with [OF-1309] - S2S communication on wrong stream [OF-1329] - Session fixation in admin web console [OF-1335] - Forwarded messages rewritten to default namespace over S2S [OF-1356] - Add a section about upgrading from x86 to x64 to Upgrade guide (Windows) [OF-1366] - NullPointerException in Group lookup [OF-1384] - Disco-item handler should process any domain [OF-1393] - OpenFire randomString has too many digits [OF-1400] - XSS in server name field [OF-1401] - SMS error message handling doesn\'t escape content correctly [OF-1403] - Muc admin doesn\'t escape group names correctly [OF-1417] - CVE-2017-15911 XSS with domain in setup-host-settings.jsp [OF-1422] - MUC Nick Sharing can cause rejoin to fail [OF-1423] - Websocket message size is restricted to 65536 [OF-1424] - CME while calculating Group Cache stats [OF-1427] - PEP should respond to service discovery [OF-1429] - Closed BOSH sessions are still on admin console as client sessions [OF-1430] - SCRAM-SHA-1 not offered when it should be, and maybe vice-versa [OF-1431] - XMPP Ping without type= set causes a NPE [OF-1436] - Sharing BOSH context should not prevent context restart. [OF-1441] - test Maven dependencies being included in distribution [OF-1442] - dom4j included twice in (maven) target directory [OF-1443] - rpm install needlessly requires java-headless [OF-1444] - mvn package is expanded environment variables New Feature [OF-35] - Create an admin console for pubsub [OF-159] - Add an s2s testing feature [OF-1336] - User Property Provider [OF-1353] - Introduce \'priorToServerVersion\' for plugins [OF-1402] - XEP-0198 Resumption for Client Sessions Task [OF-1286] - Update shipped CA truststore [OF-1316] - Update Tinder to 1.3.0 [OF-1320] - Update bundled JRE with the latest version [OF-1339] - Merge websocket plugin with core [OF-1380] - all.log should be exposed via Openfire Admin Console [OF-1411] - Update bundled JRE with the latest version [OF-1428] - Remove deprecated Clustering plugin Improvement [OF-200] - In user summary, display \"currently logged in\" instead of blank in last logout column [OF-1030] - Monitoring Service plugin Search Archive Date Range field validation [OF-1256] - Display the current clustering status on the admin screens [OF-1306] - Cache LDAP UserDN searches [OF-1313] - Add protection for Cross-Site Request Forgery in MoTD plugin [OF-1314] - Add the ability to disabled delayed delivery (XEP-203) [OF-1317] - Update dom4j from 1.6.1 to 2.0.0 [OF-1328] - Update JSTUN library in stunserver plugin [OF-1368] - Add an informational message during failed login [OF-1370] - inVerse plugin: hide registration tab when appropriate. [OF-1373] - Check for changes in keystores [OF-1379] - Packet interceptors should trigger on error response when s2s fails [OF-1391] - Update bundled postgresql JDBC Driver to 42.1.4 [OF-1408] - Display cache expiry times, entry, hit and miss counts on the Cache Summary page [OF-1409] - Audit clearing of caches [OF-1410] - Allow openfire.bat to start in other folders [OF-1413] - Clarify Candy and InVerse readme [OF-1415] - Simplify certificate management [OF-1418] - LDAPManager reports UserNotFoundException unnecessarily [OF-1425] - Allow plugins to define a minimum Java version [OF-1434] - Optimize sender check in PubSubEngine#createNodeHelper [OF-1438] - Add option to replace private key [OF-1445] - Cache reconfig without restart
* Thu Oct 12 2017 ecsosAATTopensuse.org- update to 4.1.6 Sub-task [OF-1020] - Admin Console Remote File Inclusion (RFI) Vulnerability Bug [OF-1304] - SQL syntax error with monitoring plugin IQ Query Handler [OF-1362] - Websocket plugin fails when trying to use connection configuration [OF-1363] - NPE when displaying properties for non-existing user [OF-1366] - NullPointerException in Group lookup [OF-1374] - Pubsub publish NullPointerException [OF-1381] - User enumeration possible by SCRAM New Feature [OF-1354] - Add option to Client Control plugin to disable Start a chat in Spark Task [OF-1320] - Update bundled JRE with the latest version Improvement [OF-1340] - Create x64 Windows Installer [OF-1349] - Create separate Windows installer with and without JRE [OF-1359] - Elevate webclients to top level menu in openfire admin UI [OF-1360] - Update inVerse plugin to match upstream Converse 3.1.0 release. [OF-1365] - Some caches should not be purgeable. [OF-1367] - BOSH URL should be based on FQDN, not XMPP domain. [OF-1369] - Don\'t advertise in-band registration for read-only user providers- fix build error for Tumbleweed
* Sun Jul 02 2017 ecsosAATTopensuse.org- update to 4.1.5 Bug [OF-1310] - Can`t delete last item of the pubsub node [OF-1327] - Should not compare incomparable types [OF-1330] - Can\'t enable database query statistics on the admin console [OF-1332] - Update bundled MySQL driver to fix utf8mb4 databases [OF-1334] - Monitoring Plugin displays \"Archive index rebuild failed\" [OF-1348] - AuthBased
*Provider try to use SortedSet without Comparable items [OF-1355] - UserImportExport plugin: import should not fail when optional config is missing Task [OF-1343] - Update install guide about the automatic service installation Improvement [OF-1277] - Change setting name to Invisible Login and Status [OF-1325] - Implement separate History settings in Client Control [OF-1326] - Allow BOSH context to be re-used. [OF-1338] - Minimum server version restrictions should ignore release status identifier [OF-1341] - Windows Launcher requires to run \"as administrator\" [OF-1342] - Remove \"Run Openfire\" from the final step of the installer [OF-1347] - Group settings update [OF-1350] - Be less strict when setting a password on a MUC room [OF-1351] - Parse \'release\' number [OF-1352] - Plugin version number should not wrap
* Mon May 22 2017 ecsosAATTopensuse.org- update to 4.1.4 Bug [OF-119] - Ldap issue (search filter and \'AATT\' encoding) [patch] [OF-1272] - DBAccess plugin XSS [OF-1273] - Javadoc will not build in Docker [OF-1305] - Openfire doesn\'t load user names with multi-byte characters from LDAP/AD [OF-1322] - EXTERNAL is always offered for C2S sessions Task [OF-1319] - Update bundled JRE with the latest version Improvement [OF-1292] - NPE in Admin Console when cancelling creating a new room [OF-1295] - Add information about windows service into Upgrade Guide [OF-1297] - Add another note about UAC to the documentation [OF-1301] - Don\'t fail when default value for FQDN cannot be resolved. [OF-1311] - Store a list as a property value. [OF-1312] - Allow SASL mechanisms to be configured through the admin console. [OF-1321] - Prevent stacktrace when using admin console with stale session. [OF-1324] - OutgoingSessionPromise outgoing queue should be limited
* Tue May 02 2017 ecsosAATTopensuse.org- insert file openfire.service for systemd- enable systemd and disable sysvinit for distributions which has systemd.
* Fri Mar 10 2017 ecsosAATTopensuse.org- update to 4.1.3 Bug [OF-1263] - Contact List sharing shows stale data [OF-1269] - Admin Console shows wrong group affiliation information for some users- update to 4.1.2 Bug [OF-1195] - JDBCAuthProvider does not play nice with SCRAM [OF-1271] - MUC History doesn\'t replay copy complex elements correctly after restart [OF-1278] - Recursive Loop in SCRAM salt generation [OF-1280] - Wrong ADD COLUMN syntax for Oracle Upgrade Scripts [OF-1282] - Setting TLS_CERTIFICATE_VERIFY false does not properly work [OF-1291] - MAM not advertised on chatrooms Task [OF-1270] - Remove obsolete information and update links in the Readme [OF-1281] - Update installation package with the latest Java JRE Improvement [OF-1275] - Openfire is unable to connect to LDAPS when using TLSv1.1 or TSLv1.2 [OF-1288] - Monitoring plugin does not add queryid and id to MAM responses [OF-1289] - Openfire should load jars in a predictable order [OF-1290] - Stack Overflow in SASL EXTERNAL auth
* Wed Jan 04 2017 ecsosAATTopensuse.org- update to 4.1.1 Bug [OF-1253] - Due to initial mysql schema failure, a new install will ask for current admin password and fail due to non-existent schema [OF-1254] - Database update scripts for 25 set version 24 [OF-1255] - Invalid SQL syntax in Mysql installation script. [OF-1257] - SQLServer syntax error java.sql.SQLException: Incorrect syntax near the keyword \'COLUMN\'. [OF-1260] - ClientControl plugin: Improve CSRF error message New Feature [OF-1258] - Add an option to Client Control plugin to disable Anonymous login in Spark Improvement [OF-1259] - Migrate XML property \'xmpp.fqdn\'- update to 4.1.0 Sub-task [OF-777] - Admin Console Cross Site Request Forgery (CSRF) Vulnerability [OF-836] - Multiple Reflected XSS Vulnerabilities in Admin Console [OF-845] - XSS vulnerability in Monitoring Service pages in Admin Console [OF-941] - CVE-2015-7707 Admin Console Privilege Escalation Vulnerability [OF-997] - Admin Console: Frameable Response (potential Clickjacking) [OF-1018] - The “alias” field on the Trust Store Import Form permits entry of JavaScript [OF-1019] - Admin Cross Site Scripting (XSS) Vulnerabilities [OF-1252] - Log null cache stores Bug [OF-355] - ldap.authorizeField property is ignored in LdapAuthorizationPolicy [OF-477] - SASL server in OF creates digest-uri based on xmpp.fqdn but it sends xmpp.domain to the client [OF-817] - ofMucConversationLog only persists body of groupchat stanzas [OF-867] - Inconsistent use of keys in groupMetaCache [OF-927] - Pressing enter should trigger Continue button on admin password setup page [OF-942] - CVE-2015-6972 CVE-2015-6973 Admin Console Security Improvements [OF-1013] - Setting StartTLS policy for S2S has no effect [OF-1040] - Banning users from room does not result in proper exit [OF-1041] - Using AD specific attribute breaks OpenLDAP support [OF-1042] - NPE in stanza handler (after failed TLS?) [OF-1045] - NPE with cluster management if cluster has not been started [OF-1046] - Error 503 emitted sending update notifications to offline admins that are over offline storage quota [OF-1051] - ConcurrentModificationException in PluginManager [OF-1053] - i18n params fail when text has apostrophe [OF-1054] - IllegalStateException when destroying MUC room prevents unavailable broadcast to be sent [OF-1061] - MUC history and room subject are sent in wrong order [OF-1063] - Avoid thread pool startvation under load [OF-1079] - Database migration script for oracle has wrong syntax in v22 [OF-1081] - StartTLS policy \'required\' ignored for S2S [OF-1082] - Fix unicode read on BOSH [OF-1083] - Cannot join room in a cluster after an availability update [OF-1087] - Monitoring plugin gives invalid responses [OF-1090] - Outcasts should not be allowed to register with room [OF-1091] - Set affiliation to \'none\' after removing registration from room [OF-1093] - Prevent NPE on Admin Console user listing when user has no creationDate [OF-1100] - SSL Certificate import should be more forgiving [OF-1103] - Stun server plugin is not showing saved configuration [OF-1104] - Scram support bypasses AuthProvider [OF-1105] - Plugin-registered servlets won\'t work with uppercase characters in path [OF-1116] - Java 7 incompatibility [OF-1122] - GSSAPI fails [OF-1126] - AbstractGroupProvider hides exception from interface definition [OF-1129] - Setup truncates LDAP password to 30 characters [OF-1132] - Monitoring plugin does not add namespace [OF-1146] - LocalMUCRoom.addParticipant no longer works [OF-1156] - Cache implementations should have consistent behavior regarding null keys [OF-1167] - Fresh installation asks for a current password [OF-1171] - Update message routing to RFC 6120 [OF-1173] - Add EXTERNAL to the list of default SASL mechanisms [OF-1175] - noarch RPM should explicitly require jre-headless >= 7 [OF-1188] - Blacklisted s2s domain still consumes outbound available threads [OF-1203] - Concurrency issues during plugin load/unload [OF-1204] - When unloading a parent plugin, all children should be unloaded. [OF-1206] - PrivacyManager does not share data between instances. [OF-1207] - NullPointException in LocalMUCRoom canSendPrivateMessage [OF-1212] - Monitoring plugin usage of LONG column type for Oracle [OF-1213] - Add extension points to MUC [OF-1220] - Allow logins with non-latin usernames [OF-1228] - First startup emits NPE for AdminConsolePlugin HTTPS [OF-1229] - [HSQL] PubSubPersistenceManager - statement is not in batch mode [OF-1230] - Fastpath Service plugin not working [OF-1233] - Incoming stream open response always contains IM domain [OF-1236] - SASL code does not generate/handle equals sign properly in all cases [OF-1239] - NPE in MultiUserChatServiceImpl#process(IQ) with null iqHandlers [OF-1240] - Empty nicknames allowed even when MUC requires registration [OF-1245] - Openfire fails to parse the subject alternate name of certs it generated itself. [OF-1247] - Monitoring plugin database script fails New Feature [OF-190] - RFE: show openfire process owner on admin console [OF-862] - Add support for XEP-313: Message Archive Management [OF-1139] - User-to-Provider mapped User and AuthProvider [OF-1197] - Support XEP-0227 Portable Import/Export Format for XMPP-IM Servers [OF-1199] - Allow list of admins to be defined through JDBC. [OF-1214] - Update MAM (XEP-0313) to support :0 and :1 versions [OF-1225] - Add Russian translation for Search plugin [OF-1232] - Fastpath now has JiveSharedSecretSaslServer requirement found in 4.1 Openfire [OF-1246] - Support MAM (XEP-0313) for MUC (XEP-0045) Task [OF-1217] - Update install4j config file to match current release schema Improvement [OF-512] - Configurable host/IP for file transfers (streamhost / port 7777) [OF-955] - Update HSQLDB to the latest version [OF-1037] - Split bookmark from clientcontrol [OF-1048] - Should not store chat state messages [OF-1049] - Improve Certificate Store Management [OF-1055] - Remove exclamation mark from the Search button [OF-1056] - Have proper drop-in replacement for commons-logging [OF-1057] - Upgrade Jetty to latest patch release of its 9.2 branch. [OF-1085] - Allows dynamic setting of disco info handler and disco items handler [OF-1088] - Update Chinese Simplified translation [OF-1089] - XEP-0313: send IQ result only after messages [OF-1092] - Allow SASL mechanisms to be plugged in [OF-1094] - Allow UserProvider to be reset to default [OF-1095] - Have uniform logging of plugin lifecycle [OF-1096] - Update log4j to its latest release. [OF-1097] - Make jabber:iq:auth (XEP-0078) optional [OF-1098] - Anonymous authentication should not be enabled by default. [OF-1111] - Bundle 64bit JVM with RPM artifact [OF-1117] - Improve performance of monitoring plugin by adding database indexes. [OF-1123] - Should not offer SASL mechanisms when there\'s no implementation. [OF-1124] - Changing SASL config should not require restart [OF-1125] - Use StreamID class instead of plain string [OF-1133] - Allow JSP compilation with developmentMode=true [OF-1147] - Improve Plugin Management [OF-1149] - Improve (plugin) build speed [OF-1150] - Add support for muc#roomconfig_allowpm [OF-1162] - Update bundled postgresql driver to 9.4-1209 [OF-1170] - File Transfer Proxy should list on all addresses [OF-1172] - Add support for a wildcard DNS override [OF-1182] - Remove obsolete Releases news from RSS and expand Blog section [OF-1184] - Improve Domain field\'s tooltip in the setup process [OF-1189] - Get enum value from JiveGlobals [OF-1194] - SMS notification [OF-1196] - System properties should not be shortened when unnecessary. [OF-1198] - Improve MUC error handling (don\'t try to respond to responses) [OF-1205] - Show message when plugin manager is working [OF-1227] - Improve Plugin servlet filter functionality [OF-1238] - Introduce LocalMUCRoomManager to encapsule the simple management for LocalMucRooms [OF-1241] - Add NT Hashing for JDBC connections [OF-1244] - Help evaluate DNS SRV config- clean spec-file
* Mon Dec 05 2016 ecsosAATTopensuse.org- update to 4.0.4 Bug [OF-266] - Fastpath Form UI page in Admin Console doesnt show images [OF-1141] - PEP nodes return no items when asked for all of them [OF-1152] - XmlDebugger not printing non-interpreted xml traffic [OF-1174] - MUC should respond to IQ queries [OF-1177] - .deb requirement of default-jre is too strict and does not allow for side loaded Oracle [OF-1180] - BOSH endpoints redirect all the requests with the trailing slash [OF-1201] - BOSH servlet should close async context on exception [OF-1202] - Proxool disconnects active threads after 5 minutes [OF-1209] - s2s connection settings whitelisting does not work / console UI broken [OF-1210] - correct time-to-live-seconds and MaxLifetime settings for hazelcast [OF-1223] - Messages loaded from ofOffline are not sorted by time stamp leading to out-of-order receipt [OF-1226] - Enable use of wildcard when searching users in LDAP Task [OF-1158] - Update installation package with the latest Java JRE Improvement [OF-1142] - Improve documentation part about UAC on Windows [OF-1211] - Fix description of Broadcast disabling option in Client Control plugin [OF-1221] - Add options from default.properties to Client Control plugin