Prosodical Thoughts

Prosody 0.12.4 released

We are pleased to announce a new minor release from our stable branch. We’re relieved to announce this overdue maintenance release containing a number of bug fixes and also some improvements from the last few months. Especially the prosodyctl check tool which gained some new diagnostic checks as well as handling of configuration option types the same way Prosody itself does. A summary of changes in this release: Minor changes core.

Prosody 0.12.3 released

We are pleased to announce a new minor release from our stable branch. This is a bugfix release for our stable 0.12 series. Most notably, it fixes a regression for SQL users introduced in 0.12.2, and a separate long-standing compatibility issue with archive stores on certain MySQL/MariaDB versions. It also fixes an issue with websockets discovered by the Jitsi team, some issues with our internal HTTP client API, and we’ve improved the accuracy of ‘prosodyctl check dns’ in certain configurations.

Prosody 0.12.2 released

We are pleased to announce a new minor release from our stable branch. This is a regularly delayed release containing a number of fixes for issues that we have come across since the last release of the 0.12 series. A summary of changes in this release: Fixes and improvements util.stanza: Allow U+7F when constructing stazas net.unbound: Preserve built-in defaults and Prosodys settings for luaunbound (fixes #1763: luaunbound not reading resolv.

Prosody 0.11.14 released

We are pleased to announce a new minor release from our stable branch. This release fixes an issue in the library Prosody uses to build XML stanzas, wherein it was too strict and disallowed the character “DEL”, which is actually allowed by XML. This has no effect on normal stanza routing and delivery, but may cause reading stanzas from message archives or offline message stores to fail. A summary of changes in this release:

Prosody 0.12.1 released

We are pleased to announce a new minor release from our stable branch. While the 0.12.0 release has been a huge success, inevitably people found some aspects that didn’t work quite as intended, or weren’t as polished as they ought to be. With the appreciation for the help from everyone reporting issues to us, we’re happy to now release our best version yet - 0.12.1 is here! Notably, we made a couple of changes that improve compatibility with Jitsi Meet, we fixed some bugs in our newly-extended XEP-0227 support, invites, and DNS handling.

Prosody 0.12.0 released

ÄNTLIGEN! It’s finally here! After 3 years of development and through some chaotic times, Prosody 0.12.0 is released!

What’s the significance of this release? Like many software projects, Prosody follows a “branch” development/release model. We frequently make minor releases with bug fixes and improvements from our stable branch, while we implement more adventurous changes in our development branch, ready for the next major release.

Well, this is one of those adventurous major releases! Specifically, the first release in the 0.12 series, which will now be our new stable branch.

We can’t wait to share the many exciting features and changes with everyone. With over 2400 commits, this release couldn’t have been achieved without all the help from our many contributors, testers and other community members - you know who you are!

Prosody 0.11.13 released

We are pleased to announce a new minor release from our stable branch. This is a(nother!) release for our stable branch to fix a memory leak caused by the security fix. Deployments using websockets, SQL storage and possibly other configurations may have noticed increasing memory usage after upgrading to 0.11.12. This is resolved by this new release. A summary of changes in this release: Minor changes util.xml: Break reference to help the GC (fixes #1711) util.

Prosody 0.11.12 released

We are pleased to announce a new minor release from our stable branch. This is a security release that addresses a denial-of-service vulnerability in Prosody’s mod_websocket. For more information, refer to the 20220113 advisory. A summary of changes in this release: Security util.xml: Do not allow doctypes, comments or processing instructions Download As usual, download instructions for many platforms can be found on our download page If you have any questions, comments or other issues with this release, let us know!

Prosody 0.11.11 released

We are pleased to announce a new minor release from our stable branch. This release contains some fixes to PEP to control memory usage, along with a small batch of fixes for issues discovered since the last release. This will likely be the last release of the 0.11 branch. A summary of changes in this release: Fixes and improvements net.server_epoll: Prioritize network events over timers to improve performance under heavy load mod_pep: Add some memory usage limits mod_pep: Prevent creation of services for non-existent users mod_pep: Free resources on user deletion (needed a restart previously) Minor changes mod_pep: Free resources on reload mod_c2s: Indicate stream secure state in error text when no stream features to offer MUC: Fix logic for access to affiliation lists net.

Prosody 0.11.10 released

We are pleased to announce a new minor release from our stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previously released advisory for details. We recommend that all deployments upgrade if they have not yet applied the mitigation described in the advisory. A handful fixes for issues discovered since 0.11.9 are also included. A summary of changes in this release: Security MUC: Fix logic for access to affiliation lists CVE-2021-37601 https://prosody.