Version 2.0.22 of Mosquitto has been released. This is a bugfix release. Broker Windows: Fix broker crash on startup if using log_dest stdout Bridge: Fix idle_timeout never occurring for lazy bridges| Eclipse Mosquitto
Version 2.0.21 of Mosquitto has been released. This is a security and bugfix release. Security: - Fix leak on malicious SUBSCRIBE by authenticated client. Closes [eclipse #248]. - Further fix for CVE-2023-28366. Broker Fix clients sending a RESERVED packet not being quickly disconnected. Closes #2325. Fix bind_interface producing an error when used with an interface that has an IPv6 link-local address and no other IPv6 addresses. Closes #2696. Fix mismatched wrapped/unwrapped memory alloc/fre...| Eclipse Mosquitto
Version 2.0.20 of Mosquitto has been released. This is a bugfix release. Broker Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128. Open files with appropriate access on Windows. Closes #3119. Don't allow invalid response topic values. Fix some strict protocol compliance issues. Closes #3052. Client library Fix cmake build on OS X. Closes #3125. Build Fix build on NetBSD| Eclipse Mosquitto
Version 2.0.19 of Mosquitto has been released. This is a security and bugfix release. Security Fix mismatched subscribe/unsubscribe with normal/shared topics. Fix crash on bridge using remapped topic being sent a crafted packet. Don't allow SUBACK with missing reason codes in client library. Broker Fix assert failure when loading a persistence file that contains subscriptions with no client id. Fix local bridges being incorrectly expired when persistent_client_expiration is in use. Fix use of...| Eclipse Mosquitto
Version 2.0.18 of Mosquitto has been released. This is a bugfix release. Broker: - Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881. Clients: - Fix mosquitto_rr not honouring -R. Closes #2893.| Eclipse Mosquitto
Version 2.0.16 of Mosquitto has been released. This is a security and bugfix release. Security CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2 messages with the same message ID, but then never respond to the PUBREC commands. CVE-2023-0809: Fix excessive memory being allocated based on malicious initial packets that are not CONNECT packets. CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types. Br...| Eclipse Mosquitto
Version 2.0.17 of Mosquitto has been released. This is a bugfix release. Broker: - Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879. - Fix max_inflight_messages not being set correctly. Closes #2876. Apps: - Fix mosquitto_passwd -U backup file creation. Closes #2873.| Eclipse Mosquitto
Versions 2.0.15 of Mosquitto has been released. This is a security and bugfix release. Security Deleting the group configured as the anonymous group in the Dynamic Security plugin, would leave a dangling pointer that could lead to a single crash. This is considered a minor issue - only administrative users should have access to dynsec, the impact on availability is one-off, and there is no associated loss of data. It is now forbidden to delete the group configured as the anonymous group. Brok...| Eclipse Mosquitto
Versions 2.0.14 of Mosquitto has been released. This is a bugfix release. Broker Fix bridge not respecting receive-maximum when reconnecting with MQTT v5. Client library Fix mosquitto_topic_matches_sub2() not using the length parameters. Closes #2364. Fix incorrect subscribe_callback in mosquittopp.h. Closes #2367.| Eclipse Mosquitto
Version 2.0.13 of Mosquitto has been released. This is a bugfix release. Broker Fix max_keepalive option not being able to be set to 0. Fix LWT messages not being delivered if per_listener_settings was set to true. Closes #2314. Various fixes around inflight quota management. Closes #2306. Fix problem parsing config files with Windows line endings. Closes #2297. Don't send retained messages when a shared subscription is made. Fix log being truncated in Windows. Fix client id not showing in lo...| Eclipse Mosquitto
Source mosquitto-2.0.22.tar.gz (GPG signature) Git source code repository (github.com) Older downloads are available at https://mosquitto.org/files/ Binary Installation The binary packages listed be| Eclipse Mosquitto