Openfire 5.1.2 Release

The Ignite Realtime community is pleased to announce the release of Openfire 5.1.2, a maintenance update to our open-source XMPP real-time communication server!

This release primarily updates third-party libraries following reports of vulnerabilities in those dependencies. There’s no indication that Openfire itself was vulnerable to any of the reported issues, but as a precaution and to keep our dependencies up to date, we’ve included the updated libraries in this release.

The full changelog has all the details, with 12 items resolved in total.

You can obtain Openfire 5.1.2 for your platform from its download page. The SHA-256 checksums for the release artifacts are:

bbe0e3bd7837aeb6a78a1878b3e23a53a61e99d827ec966ddc40500db416eb86  openfire-5.1.2-1.noarch.rpm
354e14ebf80c03eee05649a43d52338a77797bb41529a4f1486c49e784119f9d  openfire_5.1.2_all.deb
7da2582b4bc6c25640deecd9f22cdc1278c989cd39c0a8832fc15b3aeb208235  openfire_5_1_2.dmg
b32e33bc0e5305dcac308a82447f970b59a095f1edbb425d81ac93203db2f667  openfire_5_1_2.exe
0f45006e319fb36bf869ef9ca3a3bef930a1bd683a792883b0b0b4c9a3974680  openfire_5_1_2.tar.gz
5e52d57fb9e20235ed31a6809c3ecd139fb6583c0b24575cab3459ad4ff0b0a1  openfire_5_1_2_x64.exe
4f2bcdde684ed157f19df8a792db4f907a62864baa8a6c982c970dfaa43d0421  openfire_5_1_2.zip

We’d love to hear from you! Please join our community forum or group chat and let us know what you think!

For other release announcements and news follow us on Mastodon or X

2 Likes

FWIW, OF-3338 is not fixed. It bombs out same as before, although I will say it fails much quicker now.

2026.08.17 11:24:45.559 ERROR \[pubsub-subscription-cleanup\]: org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance - Cleanup of redundant pubsub subscription rows failed.
java.sql.SQLSyntaxErrorException: data type cast needed for parameter or null literal in statement \[SELECT serviceID, nodeID, id FROM ofPubsubSubscription WHERE serviceID NOT IN (?) AND ((serviceID, nodeID, id) > (?, ?, ?)) ORDER BY serviceID, nodeID, id LIMIT 1000\]
at org.hsqldb.jdbc.JDBCUtil.sqlException(Unknown Source)
at org.hsqldb.jdbc.JDBCUtil.sqlException(Unknown Source)
at org.hsqldb.jdbc.JDBCPreparedStatement.(Unknown Source)
at org.hsqldb.jdbc.JDBCConnection.prepareStatement(Unknown Source)
at org.apache.commons.dbcp2.DelegatingConnection.prepareStatement(DelegatingConnection.java:738)
at org.apache.commons.dbcp2.DelegatingConnection.prepareStatement(DelegatingConnection.java:738)
at org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance.readPage(PubSubSubscriptionMaintenance.java:598)
at org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance.deleteRedundantRows(PubSubSubscriptionMaintenance.java:538)
at org.jivesoftware.openfire.pubsub.PubSubSubscriptionMaintenance.runCleanup(PubSubSubscriptionMaintenance.java:492)
at java.base/java.lang.Thread.run(Unknown Source)
Caused by: org.hsqldb.HsqlException: data type cast needed for parameter or null literal
at org.hsqldb.error.Error.error(Unknown Source)
at org.hsqldb.error.Error.error(Unknown Source)
at org.hsqldb.Statement.setParameterMetaData(Unknown Source)
at org.hsqldb.StatementDMQL.setDatabaseObjects(Unknown Source)
at org.hsqldb.StatementQuery.(Unknown Source)
at org.hsqldb.ParserDQL.compileCursorSpecification(Unknown Source)
at org.hsqldb.ParserCommand.compilePart(Unknown Source)
at org.hsqldb.ParserCommand.compileStatement(Unknown Source)
at org.hsqldb.Session.compileStatement(Unknown Source)
at org.hsqldb.StatementManager.compile(Unknown Source)
at org.hsqldb.Session.execute(Unknown Source)