Openfire (master)

• 

  daryl herzmann 5 days ago 8850091d41c6cd1c5d42965e5f2b8a9135cc9341

  Merge pull request #3360 from guusdk/OF-3301_offlinemessagestore-concurrency-fix
  OF-3301: Prevent concurrency issue when checking Offline Message Store size
• 

  daryl herzmann 5 days ago 60941232c6a2c620469b6e97edd09508749d49c3

  Merge pull request #3363 from igniterealtime/dependabot/maven/org.owasp-dependency-check-maven-12.2.2
  chore(deps-dev): bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2
• 

  dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 5 days ago c277cc9f95ea5cba079515c87b129f2e712d174c m

  chore(deps-dev): bump org.owasp:dependency-check-maven
  Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.2.1 to 12.2.2.
  - [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
  - [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
  - [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.2.1...v12.2.2)
  
  ---
  updated-dependencies:
  - dependency-name: org.owasp:dependency-check-maven
    dependency-version: 12.2.2
    dependency-type: direct:development
    update-type: version-update:semver-patch
  ...
  
  Signed-off-by: dependabot[bot] <support@github.com>

  • pom.xml (version c277cc9f95ea5cba079515c87b129f2e712d174c)
• 

  Guus der Kinderen 6 days ago 9888ada5f6d5e2d69d1554220e9b64004f62c8e9 m

  OF-3301: Prevent concurrency issue when checking Offline Message Store cache
  Replace the unsafe containsKey() / get() check with a single atomic read that treats null values as a cache miss. The same pattern was present in addMessage() and has also been corrected.

  • xmppserver/src/main/java/org/jivesoftware/openfire/OfflineMessageStore.java (version 9888ada5f6d5e2d69d1554220e9b64004f62c8e9)