| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: mosquitto | Distribution: openSUSE Tumbleweed |
| Version: 2.0.22 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Jul 14 14:28:00 2025 |
| Group: Productivity/Networking/Other | Build host: reproducible |
| Size: 756444 | Source RPM: mosquitto-2.0.22-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://mosquitto.org/ | |
| Summary: A MQTT v3.1/v3.1.1 Broker | |
Mosquitto is a message broker that implements the MQ Telemetry Transport protocol versions 3.1 and 3.1.1. MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power sensors or mobile devices such as phones, embedded computers or microcontrollers like the Arduino. A good example of this is all of the work that Andy Stanford-Clark (one of the originators of MQTT) has done in home monitoring and automation with his twittering house and twittering ferry.
EPL-1.0
* Mon Jul 14 2025 Martin Hauke <mardnh@gmx.de>
- Update to version 2.0.22
Broker
* Bridge: Fix idle_timeout never occurring for lazy bridges.
* Fix case where max_queued_messages = 0 was not treated as
unlimited.
* Fix --version exit code and output.
* Fix crash on receiving a $CONTROL message over a bridge, if
per_listener_settings is set true and the bridge is carrying
out topic remapping.
* Fix incorrect reference clock being selected on startup on
Linux. Closes #3238.
* Fix reporting of client disconnections being incorrectly
attributed to "out of memory".
* Fix compilation when using WITH_OLD_KEEPALIVE.
* Fix problems with secure websockets.
* Fix crash on exit when using WITH_EPOLL=no.
* Fix clients being incorrectly expired when they have
keepalive == max_keepalive. Closes #3226, #3286.
Dynamic security plugin
* Fix mismatch memory free when saving config which caused
memory tracking to be incorrect.
Client library
* Fix C++ symbols being removed when compiled with link time
optimisation.
* TLS error handling was incorrectly setting a protocol error
for non-TLS errors. This would cause the mosquitto_loop_start()
thread to exit if no broker was available on the first
connection attempt. This has been fixed. Closes #3258.
* Fix linker errors on some architectures using cmake.
* Thu Mar 06 2025 Martin Hauke <mardnh@gmx.de>
- Update to version 2.0.21
Broker
* Fix clients sending a RESERVED packet not being quickly
disconnected.
* Fix bind_interface producing an error when used with an
interface that has an IPv6 link-local address and no other
IPv6 addresses.
* Fix mismatched wrapped/unwrapped memory alloc/free in
properties.
* Fix allow_anonymous false not being applied in local only mode.
* Add retain_expiry_interval option to fix expired retained
message not being removed from memory if they are not
subscribed to.
* Produce an error if invalid combinations of
cafile/capath/certfile/keyfile are used.
* Backport keepalive checking from develop to fix problems in
current implementation.
Client library
* Fix potential deadlock in mosquitto_sub if -W is used.
Apps
* mosquitto_ctrl dynsec now also allows -i to specify a clientid
as well as -c. This matches the documentation which states -i.
Tests
* Fix 08-ssl-connect-cert-auth-expired and
08-ssl-connect-cert-auth-revoked tests when under load.
* Fri Nov 08 2024 Adrian Schröter <adrian@suse.de>
- systemd service: Wait till the network got setup to avoid
startup failure.
* Sat Oct 19 2024 Martin Hauke <mardnh@gmx.de>
- Update to version 2.0.20
Broker:
- Fix QoS 1 / QoS 2 publish incorrectly returning
"no subscribers".
- Don't allow invalid response topic values.
- Fix some strict protocol compliance issues.
* Thu Oct 03 2024 Martin Hauke <mardnh@gmx.de>
- Update to version 2.0.19 (CVE-2024-3935 bsc#1232635, CVE-2024-10525 bsc#1232636):
Security:
* Fix mismatched subscribe/unsubscribe with normal/shared topics.
* Fix crash on bridge using remapped topic being sent a crafted
packet.
Broker:
* Fix assert failure when loading a persistence file that
contains subscriptions with no client id.
* Fix local bridges being incorrectly expired when
persistent_client_expiration is in use.
* Fix use of CLOCK_BOOTTIME for getting time.
* Fix mismatched subscribe/unsubscribe with normal/shared topics.
* Fix crash on bridge using remapped topic being sent a crafted
packet.
Client library:
* Fix some error codes being converted to string as "unknown".
* Clear SSL error state to avoid spurious error reporting.
* Fix "payload format invalid" not being allowed as a PUBREC
reason code.
* Don't allow SUBACK with missing reason codes.
* Thu Mar 21 2024 Dirk Stoecker <opensuse@dstoecker.de>
- Add Reload action to service
* Sat Feb 03 2024 Arjen de Korte <suse+build@de-korte.org>
- Use sysuser-tools to generate mosquitto user
* Sat Dec 30 2023 Dirk Müller <dmueller@suse.com>
- update to 2.0.18 (bsc#1214918, CVE-2023-28366, bsc#1215865,
CVE-2023-0809, bsc#1215864, CVE-2023-3592):
* Fix crash on subscribe under certain unlikely conditions.
* Fix mosquitto_rr not honouring `-R`. Closes #2893.
* Fix `max_queued_messages 0` stopping clients from receiving
messages.
* Fix `max_inflight_messages` not being set correctly.
* Fix `mosquitto_passwd -U` backup file creation.
* CVE-2023-28366: Fix memory leak in broker when clients send
multiple QoS 2 messages with the same message ID, but then
never respond to the PUBREC commands.
* CVE-2023-0809: Fix excessive memory being allocated based on
malicious initial packets that are not CONNECT packets.
* CVE-2023-3592: Fix memory leak when clients send v5 CONNECT
packets with a will message that contains invalid property
types.
* Broker will now reject Will messages that attempt to publish
to $CONTROL/.
* Broker now validates usernames provided in a TLS certificate
or TLS-PSK identity are valid UTF-8.
* Fix potential crash when loading invalid persistence file.
* Library will no longer allow single level wildcard
certificates, e.g. *.com
* Fix $SYS messages being expired after 60 seconds and hence
unchanged values disappearing.
* Fix some retained topic memory not being cleared immediately
after used.
* Fix error handling related to the `bind_interface` option.
* Fix std* files not being redirected when daemonising, when
built with assertions removed.
* Fix default settings incorrectly allowing TLS v1.1.
* Use line buffered mode for stdout.
* Fix bridges with non-matching cleansession/local_cleansession
being expired on start after restoring from persistence
* Fix connections being limited to 2048 on Windows. The limit
is now 8192, where supported.
* Broker will log warnings if sensitive files are world
readable/writable, or if the owner/group is not the same as
the user/group the broker is running as. In future versions
the broker will refuse to open these files.
* mosquitto_memcmp_const is now more constant time.
* Only register with DLT if DLT logging is enabled.
* Fix any possible case where a json string might be
incorrectly loaded. This could have caused a crash if a
textname or textdescription field of a role was not a string,
when loading the dynsec config from file only.
* Dynsec plugin will not allow duplicate clients/groups/roles
when loading config from file, which matches the behaviour
for when creating them.
* Fix heap overflow when reading corrupt config with "log_dest
file".
* Use CLOCK_BOOTTIME when available, to keep track of time.
This solves the problem of the client OS sleeping and the
client hence not being able to calculate the actual time for
keepalive purposes.
* Fix default settings incorrectly allowing TLS v1.1. Closes
* Fix high CPU use on slow TLS connect.
* Fix incorrect topic-alias property value in mosquitto_sub
json output.
* Fix confusing message on TLS certificate verification.
* mosquitto_passwd uses mkstemp() for backup files.
* `mosquitto_ctrl dynsec init` will refuse to overwrite an
existing file, without a race-condition.
* Mon Aug 22 2022 Dirk Müller <dmueller@suse.com>
- update to 2.0.15:
* Deleting the group configured as the anonymous group in the Dynamic Security
plugin, would leave a dangling pointer that could lead to a single crash.
This is considered a minor issue - only administrative users should have
access to dynsec, the impact on availability is one-off, and there is no
associated loss of data. It is now forbidden to delete the group configured
as the anonymous group.
* Fix memory leak when a plugin modifies the topic of a message in
MOSQ_EVT_MESSAGE.
* Fix bridge `restart_timeout` not being honoured.
* Fix potential memory leaks if a plugin modifies the message in the
MOSQ_EVT_MESSAGE event.
* Fix unused flags in CONNECT command being forced to be 0, which is not
required for MQTT v3.1. Closes #2522.
* Improve documentation of `persistent_client_expiration` option.
Closes #2404.
* Add clients to session expiry check list when restarting and reloading from
persistence. Closes #2546.
* Fix bridges not sending failure notification messages to the local broker if
the remote bridge connection fails. Closes #2467. Closes #1488.
* Fix some PUBLISH messages not being counted in $SYS stats. Closes #2448.
* Fix incorrect return code being sent in DISCONNECT when a client session is
taken over. Closes #2607.
* Fix confusing "out of memory" error when a client is kicked in the dynamic
security plugin. Closes #2525.
* Fix confusing error message when dynamic security config file was a
directory. Closes #2520.
* Fix bridge queued messages not being persisted when local_cleansession is
set to false and cleansession is set to true. Closes #2604.
* Dynamic security: Fix modifyClient and modifyGroup commands to not modify
the client/group if a new group/client being added is not valid.
* Dynamic security: Fix the plugin being able to be loaded twice. Currently
only a single plugin can interact with a unique $CONTROL topic. Using
multiple instances of the plugin would produce duplicate entries in the
config file. Closes #2601. Closes #2470.
* Fix case where expired messages were causing queued messages not to be
delivered. Closes #2609.
* Fix websockets not passing on the X-Forwarded-For header.
* Fix use of `MOSQ_OPT_TLS_ENGINE` being unable to be used due to the openssl
ctx not being initialised until starting to connect. Closes #2537.
* Fix incorrect use of SSL_connect. Closes #2594.
* Don't set SIGPIPE to ignore, use MSG_NOSIGNAL instead. Closes #2564.
* Add documentation of struct mosquitto_message to header. Closes #2561.
* Fix documentation omission around mosquitto_reinitialise. Closes #2489.
* Fix use of MOSQ_OPT_SSL_CTX when used in conjunction with
MOSQ_OPT_SSL_CTX_DEFAULTS. Closes #2463.
* Fix failure to close thread in some situations. Closes #2545.
* Fix mosquitto_pub incorrectly reusing topic aliases when reconnecting.
* Fix `-o` not working in `mosquitto_ctrl`, and typo in related documentation.
* Thu Nov 18 2021 Martin Hauke <mardnh@gmx.de>
- Update to version 2.0.14
Broker:
* Fix bridge not respecting receive-maximum when reconnecting
with MQTT v5.
Client library:
* Fix mosquitto_topic_matches_sub2() not using the length
parameters.
* Fix incorrect subscribe_callback in mosquittopp.h.
/etc/apparmor.d /etc/apparmor.d/local /etc/apparmor.d/local/usr.sbin.mosquitto /etc/apparmor.d/usr.sbin.mosquitto /etc/mosquitto /etc/mosquitto/aclfile.example /etc/mosquitto/ca_certificates /etc/mosquitto/ca_certificates/README /etc/mosquitto/certs /etc/mosquitto/certs/README /etc/mosquitto/conf.d /etc/mosquitto/conf.d/README /etc/mosquitto/mosquitto.conf /etc/mosquitto/pskfile.example /etc/mosquitto/pwfile.example /usr/bin/mosquitto_ctrl /usr/bin/mosquitto_passwd /usr/lib/systemd/system/mosquitto.service /usr/lib/sysusers.d/mosquitto-user.conf /usr/lib64/mosquitto_dynamic_security.so /usr/sbin/mosquitto /usr/sbin/rcmosquitto /usr/share/doc/packages/mosquitto /usr/share/doc/packages/mosquitto/CONTRIBUTING.md /usr/share/doc/packages/mosquitto/ChangeLog.txt /usr/share/doc/packages/mosquitto/about.html /usr/share/doc/packages/mosquitto/aclfile.example /usr/share/doc/packages/mosquitto/examples /usr/share/doc/packages/mosquitto/examples/mysql_log /usr/share/doc/packages/mosquitto/examples/mysql_log/Makefile /usr/share/doc/packages/mosquitto/examples/mysql_log/mysql_log.c /usr/share/doc/packages/mosquitto/examples/publish /usr/share/doc/packages/mosquitto/examples/publish/basic-1.c /usr/share/doc/packages/mosquitto/examples/subscribe /usr/share/doc/packages/mosquitto/examples/subscribe/basic-1.c /usr/share/doc/packages/mosquitto/examples/subscribe_simple /usr/share/doc/packages/mosquitto/examples/subscribe_simple/Makefile /usr/share/doc/packages/mosquitto/examples/subscribe_simple/callback.c /usr/share/doc/packages/mosquitto/examples/subscribe_simple/multiple.c /usr/share/doc/packages/mosquitto/examples/subscribe_simple/single.c /usr/share/doc/packages/mosquitto/examples/temperature_conversion /usr/share/doc/packages/mosquitto/examples/temperature_conversion/Makefile /usr/share/doc/packages/mosquitto/examples/temperature_conversion/main.cpp /usr/share/doc/packages/mosquitto/examples/temperature_conversion/readme.txt /usr/share/doc/packages/mosquitto/examples/temperature_conversion/temperature_conversion.cpp /usr/share/doc/packages/mosquitto/examples/temperature_conversion/temperature_conversion.h /usr/share/doc/packages/mosquitto/logo /usr/share/doc/packages/mosquitto/logo/legacy /usr/share/doc/packages/mosquitto/logo/legacy/mosquitto-14x14.png /usr/share/doc/packages/mosquitto/logo/legacy/mosquitto-16x16.png /usr/share/doc/packages/mosquitto/logo/legacy/mosquitto.svg /usr/share/doc/packages/mosquitto/logo/mosquitto-logo-min.svg /usr/share/doc/packages/mosquitto/logo/mosquitto-logo-only.svg /usr/share/doc/packages/mosquitto/logo/mosquitto-text-below.svg /usr/share/doc/packages/mosquitto/logo/mosquitto-text-side.svg /usr/share/doc/packages/mosquitto/logo/mosquitto.ico /usr/share/doc/packages/mosquitto/misc /usr/share/doc/packages/mosquitto/misc/currentcost /usr/share/doc/packages/mosquitto/misc/currentcost/cc128_log_mysql.pl /usr/share/doc/packages/mosquitto/misc/currentcost/cc128_parse.pl /usr/share/doc/packages/mosquitto/misc/currentcost/cc128_read.pl /usr/share/doc/packages/mosquitto/misc/currentcost/cc128_read.py /usr/share/doc/packages/mosquitto/misc/currentcost/gnome-panel /usr/share/doc/packages/mosquitto/misc/currentcost/gnome-panel/CurrentCostMQTT.py /usr/share/doc/packages/mosquitto/misc/currentcost/gnome-panel/CurrentCostMQTT.server /usr/share/doc/packages/mosquitto/misc/currentcost/gnome-panel/currentcost.png /usr/share/doc/packages/mosquitto/misc/letsencrypt /usr/share/doc/packages/mosquitto/misc/letsencrypt/mosquitto-copy.sh /usr/share/doc/packages/mosquitto/pskfile.example /usr/share/doc/packages/mosquitto/pwfile.example /usr/share/doc/packages/mosquitto/security /usr/share/doc/packages/mosquitto/security/mosquitto.apparmor /usr/share/licenses/mosquitto /usr/share/licenses/mosquitto/LICENSE.txt /usr/share/licenses/mosquitto/edl-v10 /usr/share/licenses/mosquitto/epl-v20 /usr/share/man/man1/mosquitto_ctrl.1.gz /usr/share/man/man1/mosquitto_ctrl_dynsec.1.gz /usr/share/man/man1/mosquitto_passwd.1.gz /usr/share/man/man5/mosquitto.conf.5.gz /usr/share/man/man7/mosquitto-tls.7.gz /usr/share/man/man7/mqtt.7.gz /usr/share/man/man8/mosquitto.8.gz /var/lib/mosquitto
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Oct 8 23:32:53 2025