The Ignite Realtime community is pleased to announce the release of Openfire 5.1.2, a maintenance update to our open-source XMPP real-time communication server!
This release primarily updates third-party libraries following reports of vulnerabilities in those dependencies. There’s no indication that Openfire itself was vulnerable to any of the reported issues, but as a precaution and to keep our dependencies up to date, we’ve included the updated libraries in this release.
The full changelog has all the details, with 12 items resolved in total.
You can obtain Openfire 5.1.2 for your platform from its download page. The SHA-256 checksums for the release artifacts are:
FWIW, OF-3338 is not fixed. It bombs out same as before, although I will say it fails much quicker now.
2026.08.17 11:24:45.559 ERROR \[pubsub-subscription-cleanup\]: org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance - Cleanup of redundant pubsub subscription rows failed.
java.sql.SQLSyntaxErrorException: data type cast needed for parameter or null literal in statement \[SELECT serviceID, nodeID, id FROM ofPubsubSubscription WHERE serviceID NOT IN (?) AND ((serviceID, nodeID, id) > (?, ?, ?)) ORDER BY serviceID, nodeID, id LIMIT 1000\]
at org.hsqldb.jdbc.JDBCUtil.sqlException(Unknown Source)
at org.hsqldb.jdbc.JDBCUtil.sqlException(Unknown Source)
at org.hsqldb.jdbc.JDBCPreparedStatement.(Unknown Source)
at org.hsqldb.jdbc.JDBCConnection.prepareStatement(Unknown Source)
at org.apache.commons.dbcp2.DelegatingConnection.prepareStatement(DelegatingConnection.java:738)
at org.apache.commons.dbcp2.DelegatingConnection.prepareStatement(DelegatingConnection.java:738)
at org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance.readPage(PubSubSubscriptionMaintenance.java:598)
at org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance.deleteRedundantRows(PubSubSubscriptionMaintenance.java:538)
at org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance.runCleanup(PubSubSubscriptionMaintenance.java:492)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.hsqldb.HsqlException: data type cast needed for parameter or null literal
at org.hsqldb.error.Error.error(Unknown Source)
at org.hsqldb.error.Error.error(Unknown Source)
at org.hsqldb.Statement.setParameterMetaData(Unknown Source)
at org.hsqldb.StatementDMQL.setDatabaseObjects(Unknown Source)
at org.hsqldb.StatementQuery.(Unknown Source)
at org.hsqldb.ParserDQL.compileCursorSpecification(Unknown Source)
at org.hsqldb.ParserCommand.compilePart(Unknown Source)
at org.hsqldb.ParserCommand.compileStatement(Unknown Source)
at org.hsqldb.Session.compileStatement(Unknown Source)
at org.hsqldb.StatementManager.compile(Unknown Source)
at org.hsqldb.Session.execute(Unknown Source)