SECURITY: Fedora 34 Update: mosquitto-2.0.11-1.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-1382b4c7f5
2021-06-19 01:08:02.703438
--------------------------------------------------------------------------------
Name : mosquitto
Product : Fedora 34
Version : 2.0.11
Release : 1.fc34
URL : http://mosquitto.org/
Summary : Open Source MQTT v5/v3.1.x Broker
Description :
Mosquitto is an open source message broker that implements the MQ Telemetry
Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method
of carrying out messaging using a publish/subscribe model. This makes it
suitable for "machine to machine" messaging such as with low power sensors
or mobile devices such as phones, embedded computers or micro-controllers
like the Arduino.
--------------------------------------------------------------------------------
Update Information:
2.0.11 Security If an authenticated client connected with MQTT v5 sent a
crafted CONNECT message to the broker a memory leak would occur. Affects
versions 1.6 to 2.0.10 inclusive. Broker Fix possible crash having just
upgraded from 1.6 if per_listener_settings true is set, and a SIGHUP is sent to
the broker before a client has reconnected to the broker. Fix bridge not
reconnectng if the first reconnection attempt fails. Improve QoS 0 outgoing
packet queueing. Fix non-reachable bridge blocking the broker on Windows.
Fix possible corruption of pollfd array on Windows when bridges were
reconnecting. Fix QoS 0 messages not being queued when queue_qos0_messages
was enabled. Clients If sending mosquitto_sub output to a pipe,
mosquitto_sub will now detect that the pipe has closed and disconnect. Fix
mosquitto_pub -l quitting if a message publication is attempted when the broker
is temporarily unavailable.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 10 2021 Peter Robinson - 2.0.11-1
- Update to 2.0.11
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-1382b4c7f5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
A mosquitto security update has been released for Fedora 34.
