Versions 2.0.11 and 1.6.15 of Mosquitto has been released. These are a security and bugfix releases. 2.0.11 Security If an authenticated client connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur. Affects versions 1.6 to 2.0.10 inclusive. Broker Fix possible crash having…
Versions 2.0.12 of Mosquitto has been released. This is a security and bugfix release. Security An MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service. This has been fixed. Fix max_keepalive not…
Version 2.0.13 of Mosquitto has been released. This is a bugfix release. Broker Fix max_keepalive option not being able to be set to 0. Fix LWT messages not being delivered if per_listener_settings was set to true. Closes #2314. Various fixes around inflight quota management. Closes #2306. Fix problem parsing config…
Versions 2.0.14 of Mosquitto has been released. This is a bugfix release. Broker Fix bridge not respecting receive-maximum when reconnecting with MQTT v5. Client library Fix mosquitto_topic_matches_sub2() not using the length parameters. Closes #2364. Fix incorrect subscribe_callback in mosquittopp.h. Closes #2367.
Versions 2.0.15 of Mosquitto has been released. This is a security and bugfix release. Security Deleting the group configured as the anonymous group in the Dynamic Security plugin, would leave a dangling pointer that could lead to a single crash. This is considered a minor issue - only administrative users…
Version 2.0.16 of Mosquitto has been released. This is a security and bugfix release. Security CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2 messages with the same message ID, but then never respond to the PUBREC commands. CVE-2023-0809: Fix excessive memory being allocated based on malicious…
Version 2.0.17 of Mosquitto has been released. This is a bugfix release. Broker: - Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879. - Fix max_inflight_messages not being set correctly. Closes #2876. Apps: - Fix mosquitto_passwd -U backup file creation. Closes #2873.
Version 2.0.18 of Mosquitto has been released. This is a bugfix release. Broker: - Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881. Clients: - Fix mosquitto_rr not honouring -R. Closes #2893.
Today, many companies are on a cloud‑native journey to adaptive applications. By “adaptive” we primarily mean that the app responds to changes in its operating environment by automatically scaling in response to the level of demand, detecting and mitigating problems, and recovering from failures, among other capabilities. But we also…
Last month at NGINX Sprint 3.0, I hosted a chat on open source ecosystems with three industry experts: Matt Butcher, CEO of Fermyon; Stephen Chin, VP of Developer Relations at JFrog; and Robert Sirchia, Sr. Technical Evangelist at SUSE. Given their brilliant insights, I could not resist a final question, namely: What technology should we pay attention…