<li>[<ahref='http://issues.igniterealtime.org/browse/OF-692'>OF-692</a>] - Node column in ofSecurityAuditLog table should accept NULL entries
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-693'>OF-693</a>] - openfire init script target reload should not call restart
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-699'>OF-699</a>] - Race condition during cluster initialization (Hazelcast plugin)
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-705'>OF-705</a>] - Admin console (XSS) vulnerability lets attacker change admin password or create new admin
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-706'>OF-706</a>] - Openfire does not close the stream with a stream error if the namespace is not 'http://etherx.jabber.org/streams'
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-717'>OF-717</a>] - The BOSH implementation should include a 'from' attribute in its session creation response.
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-720'>OF-720</a>] - Roster deletion of userB by userA should not remove userA from userB's roster
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-722'>OF-722</a>] - Openfire should save XEP-0184 delivery receipts as offline message
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-725'>OF-725</a>] - Openfire must return a service-unavailable error when blocking an IQ of type get or set because of a privacy list. OF should return error if a message stanza is blocked
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-731'>OF-731</a>] - HybridUserProvider does not initialize correctly
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-733'>OF-733</a>] - OF should not silently close a connection, when receiving a message without 'to' attribute
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-734'>OF-734</a>] - Openfire cannot deal with SASL <abort/>
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-735'>OF-735</a>] - Openfire should return <invalid-mechanism/> SASL failure, when requesting an unknown mechanism
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-741'>OF-741</a>] - Debian Installer should allow Java7 as a prereq
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-742'>OF-742</a>] - MUC Service sends "disturbing" service messages.
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-743'>OF-743</a>] - MUC room does not return its identity or features, when querying for room info
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-745'>OF-745</a>] - Use TLS-dialback even if that mechanism is not advertised
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-746'>OF-746</a>] - Use update-alternatives to set JAVA_HOME on debian
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-751'>OF-751</a>] - NPE on PubSubEngine#shutdown on server shutdown
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-753'>OF-753</a>] - Improve init script to work with opensuse and fix logic with PID file
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-760'>OF-760</a>] - MUC service does not include "self-presence" status code 110
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-761'>OF-761</a>] - OF must return <jid-malformed/> instead of <bad-request/> when joining a MUC room without nickname
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-769'>OF-769</a>] - Fix typo in monitoring plugin
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-770'>OF-770</a>] - CVE-2014-2741 Uncontrolled Resource Consumption with XMPP-Layer Compression
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-772'>OF-772</a>] - IQ type="result" getting java.lang.IllegalArgumentException
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-774'>OF-774</a>] - Needless code in AuthorizationManager
</li>
</ul>
<h2>Improvement</h2>
<ul>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-163'>OF-163</a>] - fix RosterItemProvider.getItems() for Oracle
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-298'>OF-298</a>] - EntityCapabilityManager should not use a clustered cache
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-309'>OF-309</a>] - Privacy Lists drop messages silently
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-411'>OF-411</a>] - Admin or owner should be able to join a room when it has reached maximum occupants number
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-464'>OF-464</a>] - Verify if there were packets pending to be sent and decide what to do with them
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-729'>OF-729</a>] - Upgrade Hazelcast plugin to latest release version (3.1.x)
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-730'>OF-730</a>] - Migrate operational configuration properties from openfire.xml to DB
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-749'>OF-749</a>] - Upgrade bouncycastle library from 1.49 to 1.50 to keep up with JitsiVideobridge
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-764'>OF-764</a>] - Group chat history (MUC) should match configuration after server restart
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-771'>OF-771</a>] - MUC service should flush recent history before shutting down
</li>
</ul>
<h2>New Feature</h2>
<ul>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-125'>OF-125</a>] - Restrict discovery of rooms based on users membership
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-714'>OF-714</a>] - Add ability to encrypt properties so they are encrypted in the db and do not appear in the admin console.
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-758'>OF-758</a>] - Add support for XEP-0280 "Message Carbons"
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-775'>OF-775</a>] - Improve logging of invalid presence show
</li>
</ul>
<h2>Task</h2>
<ul>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-728'>OF-728</a>] - Update installation package with the latest Java JRE
</li>
</ul>
<h2>Sub-task</h2>
<ul>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-10'>OF-10</a>] - Pubsub event message with SHIM information holding multiple subscriptions should have the name='SubID'.
</li>
<li>[<ahref='http://issues.igniterealtime.org/browse/OF-103'>OF-103</a>] - [MUC] Allow nicknames to be used more than once in the same room