Openfire 4.1.6 release, instant messaging platform

Sub-task

• [OF-1020] – Admin Console Remote File Inclusion (RFI) Vulnerability

Bug

• [OF-1304] – SQL syntax error with monitoring plugin  IQ Query Handler
• [OF-1362] – Websocket plugin fails when trying to use connection configuration
• [OF-1363] – NPE when displaying properties for non-existing user
• [OF-1366] – NullPointerException in Group lookup
• [OF-1374] – Pubsub publish NullPointerException
• [OF-1381] – User enumeration possible by SCRAM

New Feature

• [OF-1354] – Add an option to the Client Control plug-in to disable chat in Spark

Task

• [OF-1320] – Use the latest version to update the bundled JRE

Improvement

• [OF-1340] – create x64 Windows Installer
• [OF-1359] – Elevate webclients to top level menu in openfire admin UI
• [OF-1360] – Update inVerse plugin to match upstream Converse 3.1.0 release.
• [OF-1365] – Some caches should not be purgeable.
• [OF-1367] – BOSH URL should be based on FQDN, not XMPP domain.
• [OF-1369] – Don’t advertise in-band registration for read-only user providers

Download