For ease of testing there are now some binaries available for testing the upcoming 2.1 release. We would strongly urge everyone using mosquitto to test out these versions and provide feedback if anyth| Eclipse Mosquitto
Version 2.0.22 of Mosquitto has been released. This is a bugfix release. Broker Windows: Fix broker crash on startup if using log_dest stdout Bridge: Fix idle_timeout never occurring for lazy bridges| Eclipse Mosquitto
Version 2.0.21 of Mosquitto has been released. This is a security and bugfix release. Security: - Fix leak on malicious SUBSCRIBE by authenticated client. Closes [eclipse #248]. - Further fix for CVE-2023-28366. Broker Fix clients sending a RESERVED packet not being quickly disconnected. Closes #2325. Fix bind_interface producing an error when used with an interface that has an IPv6 link-local address and no other IPv6 addresses. Closes #2696. Fix mismatched wrapped/unwrapped memory alloc/fre...| Eclipse Mosquitto
Version 2.0.20 of Mosquitto has been released. This is a bugfix release. Broker Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128. Open files with appropriate access on Windows. Closes #3119. Don't allow invalid response topic values. Fix some strict protocol compliance issues. Closes #3052. Client library Fix cmake build on OS X. Closes #3125. Build Fix build on NetBSD| Eclipse Mosquitto
Version 2.0.19 of Mosquitto has been released. This is a security and bugfix release. Security Fix mismatched subscribe/unsubscribe with normal/shared topics. Fix crash on bridge using remapped topic being sent a crafted packet. Don't allow SUBACK with missing reason codes in client library. Broker Fix assert failure when loading a persistence file that contains subscriptions with no client id. Fix local bridges being incorrectly expired when persistent_client_expiration is in use. Fix use of...| Eclipse Mosquitto
Version 2.0.18 of Mosquitto has been released. This is a bugfix release. Broker: - Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881. Clients: - Fix mosquitto_rr not honouring -R. Closes #2893.| Eclipse Mosquitto
Version 2.0.16 of Mosquitto has been released. This is a security and bugfix release. Security CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2 messages with the same message ID, but then never respond to the PUBREC commands. CVE-2023-0809: Fix excessive memory being allocated based on malicious initial packets that are not CONNECT packets. CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types. Br...| Eclipse Mosquitto
Version 2.0.17 of Mosquitto has been released. This is a bugfix release. Broker: - Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879. - Fix max_inflight_messages not being set correctly. Closes #2876. Apps: - Fix mosquitto_passwd -U backup file creation. Closes #2873.| Eclipse Mosquitto
Versions 2.0.15 of Mosquitto has been released. This is a security and bugfix release. Security Deleting the group configured as the anonymous group in the Dynamic Security plugin, would leave a dangling pointer that could lead to a single crash. This is considered a minor issue - only administrative users should have access to dynsec, the impact on availability is one-off, and there is no associated loss of data. It is now forbidden to delete the group configured as the anonymous group. Brok...| Eclipse Mosquitto
Versions 2.0.14 of Mosquitto has been released. This is a bugfix release. Broker Fix bridge not respecting receive-maximum when reconnecting with MQTT v5. Client library Fix mosquitto_topic_matches_sub2() not using the length parameters. Closes #2364. Fix incorrect subscribe_callback in mosquittopp.h. Closes #2367.| Eclipse Mosquitto
Source mosquitto-2.0.22.tar.gz (GPG signature) Git source code repository (github.com) Older downloads are available at https://mosquitto.org/files/ Binary Installation The binary packages listed be| Eclipse Mosquitto