mosquitto-2.0.20.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ebd07d89d2a446a7f74100ad51272e4a8bf300b61634a7812e19f068f2759de8
-size 799972

mosquitto-2.0.20.tar.gz.sig

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEoNbuodyuSaY1o7Lwd5si37PnF7cFAmcQEyoACgkQd5si37Pn
-F7fc9A/9FCsxYzmotWVwomE35CkqvhN+L2MR//3/7v+VrJTxrvmONDsP6JFg5QxQ
-LZalkFlDGc9hAU/53UEEO17+i6ZQQFwbgr0VD6m2rbGhTW/8zjtIQ1oCHFfk/slo
-/pgIVKrTiop+Nz9K17QlvHPgdxzvELhRX3fEMfNAuMEmvjtG4diL4I7YZkiLrabZ
-fR4SlOvzGH+vtraKQdguE2bRLyJu6wJ/FjZSmqTaolJcgH65ySvaJegY6mF/dwn0
-EcI9qizcHwxEYZKrGLdtogd7/IxasbTZCy57ufltNNnKWLO/FKbyWW4SlIiJFkVw
-9qN2Qp0d+l1Jks8PYuHRyyzlyDbYQkDZRVpSIULBt55nNJueuzqrXfWGkyuby61B
-pPRY4ZWtT6YQfZfN8Imxerg/OGbOxB0DuYZJjQVeJZrbxkIGAPDVwllztgvVwAID
-PtU2760HNDGxpVrNJt6QKnzGDWEspeaMUt+H4nk1K1PKpXKJue6s/0Y9vzD6Xt+R
-pwNVyOoTd5ObBURUSqM99EhcTVKoSTr3P6Ncbupfao5WoQcSanyshNp15+hzHOCV
-iP8RfYZH4ufBtEOwPtLblxpAp/hy4s5CBkz8uSdkxEAF+Njz8mMBRIv6aNzc3rJp
-x2UowVhDhhUJe+Fl9LcmmV4ZDzpsqOiRY05haQWk2WN8kZpI/BM=
-=OaGg
------END PGP SIGNATURE-----

mosquitto-2.0.23.tar.gz.sig

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=zyu7
+-----END PGP SIGNATURE-----

mosquitto.changes

@@ -1,3 +1,87 @@
+-------------------------------------------------------------------
+Sat Feb 21 11:09:25 UTC 2026 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 2.0.23 (boo#1258671)
+  * Fix handling of disconnected sessions for `per_listener_settings
+    true`
+  * Check return values of openssl *_get_ex_data() and
+    *_set_ex_data() to prevent possible crash. This could occur only
+    in extremely unlikely situations
+  * Check return value of openssl ASN1_string_[get0_]data()
+    functions for NULL. This prevents a crash in case of incorrect
+    certificate handling in openssl
+  * Fix potential crash on startup if a malicious/corrupt
+    persistence file from mosquitto 1.5 or earlier is loaded
+  * Limit auto_id_prefix to 50 characters
+
+-------------------------------------------------------------------
+Mon Jul 14 12:28:00 UTC 2025 - Martin Hauke <mardnh@gmx.de>
+
+- Update to version 2.0.22
+  Broker
+  * Bridge: Fix idle_timeout never occurring for lazy bridges.
+  * Fix case where max_queued_messages = 0 was not treated as
+    unlimited.
+  * Fix --version exit code and output.
+  * Fix crash on receiving a $CONTROL message over a bridge, if
+    per_listener_settings is set true and the bridge is carrying
+    out topic remapping.
+  * Fix incorrect reference clock being selected on startup on
+    Linux. Closes #3238.
+  * Fix reporting of client disconnections being incorrectly
+    attributed to "out of memory".
+  * Fix compilation when using WITH_OLD_KEEPALIVE.
+  * Fix problems with secure websockets.
+  * Fix crash on exit when using WITH_EPOLL=no.
+  * Fix clients being incorrectly expired when they have
+    keepalive == max_keepalive. Closes #3226, #3286.
+  Dynamic security plugin
+  * Fix mismatch memory free when saving config which caused
+    memory tracking to be incorrect.
+  Client library
+  * Fix C++ symbols being removed when compiled with link time
+    optimisation.
+  * TLS error handling was incorrectly setting a protocol error
+    for non-TLS errors. This would cause the mosquitto_loop_start()
+    thread to exit if no broker was available on the first
+    connection attempt. This has been fixed. Closes #3258.
+  * Fix linker errors on some architectures using cmake.
+
+-------------------------------------------------------------------
+Thu Mar  6 20:46:07 UTC 2025 - Martin Hauke <mardnh@gmx.de>
+
+- Update to version 2.0.21
+  Broker
+  * Fix clients sending a RESERVED packet not being quickly
+    disconnected.
+  * Fix bind_interface producing an error when used with an
+    interface that has an IPv6 link-local address and no other
+    IPv6 addresses.
+  * Fix mismatched wrapped/unwrapped memory alloc/free in
+    properties.
+  * Fix allow_anonymous false not being applied in local only mode.
+  * Add retain_expiry_interval option to fix expired retained
+    message not being removed from memory if they are not
+    subscribed to.
+  * Produce an error if invalid combinations of
+    cafile/capath/certfile/keyfile are used.
+  * Backport keepalive checking from develop to fix problems in
+    current implementation.
+  Client library
+  * Fix potential deadlock in mosquitto_sub if -W is used.
+  Apps
+  * mosquitto_ctrl dynsec now also allows -i to specify a clientid
+    as well as -c. This matches the documentation which states -i.
+  Tests
+  * Fix 08-ssl-connect-cert-auth-expired and
+    08-ssl-connect-cert-auth-revoked tests when under load.
+
+-------------------------------------------------------------------
+Fri Nov  8 16:32:01 UTC 2024 - Adrian Schröter <adrian@suse.de>
+
+- systemd service: Wait till the network got setup to avoid
+  startup failure.
+
 -------------------------------------------------------------------
 Sat Oct 19 08:56:14 UTC 2024 - Martin Hauke <mardnh@gmx.de>
 
@@ -11,7 +95,7 @@ Sat Oct 19 08:56:14 UTC 2024 - Martin Hauke <mardnh@gmx.de>
 -------------------------------------------------------------------
 Thu Oct  3 12:22:10 UTC 2024 - Martin Hauke <mardnh@gmx.de>
 
-- Update to version 2.0.19
+- Update to version 2.0.19 (CVE-2024-3935 bsc#1232635, CVE-2024-10525 bsc#1232636):
   Security:
   * Fix mismatched subscribe/unsubscribe with normal/shared topics.
   * Fix crash on bridge using remapped topic being sent a crafted

mosquitto.service

@@ -1,6 +1,7 @@
 [Unit]
 Description=Mosquitto MQTT v3.1/v3.1.1 Broker
 Documentation=man:mosquitto.conf(5) man:mosquitto(8)
+After=network-online.target nss-lookup.target
 
 [Service]
 # added automatically, for details please see

mosquitto.spec

@@ -1,7 +1,8 @@
 #
 # spec file for package mosquitto
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +21,7 @@
 %define c_lib   libmosquitto1
 %define cpp_lib libmosquittopp1
 Name:           mosquitto
-Version:        2.0.20
+Version:        2.0.23
 Release:        0
 Summary:        A MQTT v3.1/v3.1.1 Broker
 License:        EPL-1.0
@@ -151,10 +152,8 @@ install -D -m 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/%{name}-user.conf
 %postun
 %service_del_postun %{name}.service
 
-%post -n %{c_lib} -p /sbin/ldconfig
-%postun -n %{c_lib} -p /sbin/ldconfig
-%post -n %{cpp_lib} -p /sbin/ldconfig
-%postun -n %{cpp_lib} -p /sbin/ldconfig
+%ldconfig_scriptlets -n %{c_lib}
+%ldconfig_scriptlets -n %{cpp_lib}
 
 %files
 %license edl-v10 epl-v20 LICENSE.txt
@@ -200,6 +199,7 @@ install -D -m 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/%{name}-user.conf
 %{_libdir}/libmosquittopp.so.*
 
 %files devel
+%license edl-v10 epl-v20 LICENSE.txt
 %{_libdir}/libmosquitto.so
 %{_libdir}/libmosquittopp.so
 %{_includedir}/mosquitto.h