JumpServer v5.1.1 is now available. This maintenance release focuses on operational reliability: persistent write protection for databases and Redis in high availability deployments, redeployment and switchover handling under replication lag, RDP applet host deployment around NLA requirements, and a set of fixes for replication, credential recovery, and token validation.
Improvements
- Background task records now omit the original args and kwargs at creation, reducing unnecessary parameter persistence.
- Persistent write protection for databases and Redis in high availability deployments has been strengthened across container restarts, recreation, and failure recovery.
- Redeployment completion checks now tolerate normal replication lag, and switchover waits and recovery coordination have been refined to reduce false failure detection.
Bug Fixes
- Access Token format is now validated while preserving fallback compatibility with other Bearer Token authentication methods.
- Fixed NLA configuration and RDP service refresh during Tinker applet host deployment. Group Policy is checked and listener NLA is disabled before installation, the configuration is verified afterward, and deployment stops with clear guidance when Group Policy requires NLA.
- Fixed race conditions involving role callbacks, operation locks, and file synchronization acknowledgments during switchover, automatic rejoin, and startup recovery (JumpServer EE).
- Improved MySQL/MariaDB replication position handling and crash recovery, and fixed a race condition in PostgreSQL replication slot cleanup during standby rebuilds (JumpServer EE).
- Fixed local administrator credential recovery and health checks during MySQL/MariaDB maintenance, avoiding the use of peer credentials or stale application passwords (JumpServer EE).
Upgrade and Availability
JumpServer v5.1.1 is available for both Community Edition and Enterprise Edition. The high availability fixes in this release apply to Enterprise Edition deployments running clustered components.
Upgrade from v5.1.0 or any earlier v5 release through the standard installer flow:
cd /opt
wget https://github.com/jumpserver/installer/releases/download/v5.1.1/jumpserver-installer-v5.1.1.tar.gz
tar -zxvf jumpserver-installer-v5.1.1.tar.gz
cd jumpserver-installer-v5.1.1
./jmsctl.sh upgrade
./jmsctl.sh start
For offline environments, download the Community Edition package and follow the offline upgrade steps in the official documentation.
Full release notes: https://github.com/jumpserver/jumpserver/releases/tag/v5.1.1
