Openfire 3.9.2 has been released

The Igniterealtime Community is pleased to announce that the release of Openfire version 3.9.2 is available for download! 

Openfire is a real time collaboration (RTC) server licensed under the Open Source Apache license. It uses the only widely adopted open protocol for instant messaging, XMPP (also called Jabber). Openfire is incredibly easy to setup and administer, but offers rock-solid security and performance.

This release contains a large number of fixes (70 Jira issues resolved) aimed at increasing stability, security and XMPP standards compliance.  A full changelog can be found here.  Some of the highlights of this release are:

[OF-103] - [MUC] Allow nicknames to be used more than once in the same room by a single user

[OF-114] - Clearing cache can lock up MUC

[OF-455] - Some unicode pattern in status message can break the session connection

[OF-669] - Visually failed first login to Admin Console

[OF-714] - Add ability to encrypt properties so they are encrypted in the db and do not appear in the admin console.

[OF-745] - Use TLS-dialback even if that mechanism is not advertised

[OF-757] - Allow s2s message of subdomain of XMPP domain when no components are found

[OF-569] - Add deluser adhoc command

[OF-764] - Group chat history (MUC) should match configuration after server restart

[OF-771] - MUC service should flush recent history before shutting down

[OF-125] - Restrict discovery of rooms based on users membership

[OF-297] - fix: mutual roster deletion problem

[OF-770] - CVE-2014-2741 Uncontrolled Resource Consumption with XMPP-Layer Compression

[OF-722] - Openfire should save XEP-0184 delivery receipts as offline message

[OF-758] - Add support for XEP-0280 "Message Carbons"

This is the first release of Openfire after our migration of code development to Github.  We'd encourage interested developers to fork Openfire and send pull requests!  It is best for you to create a dedicated branch on your fork to submit the eventual pull request from. Please note that we are not syncing the github repository to the previous openfire subversion repository hosted on igniterealtime.

Here are MD5sums for the downloads available.

As always, we welcome your feedback, suggestions, tips, hints, questions and other contributions in the Igniterealtime Community Forums. Please do not respond to this blog post with questions.