Merge branch 'master'
Roger A. Light
7 years ago
commit
35dea07dcd
@ -0,0 +1,40 @@
|
||||
#!/usr/bin/env python
|
||||
|
||||
# Test whether a PUBLISH to a topic starting with $ succeeds
|
||||
|
||||
import inspect, os, sys
|
||||
# From http://stackoverflow.com/questions/279237/python-import-a-module-from-a-folder
|
||||
cmd_subfolder = os.path.realpath(os.path.abspath(os.path.join(os.path.split(inspect.getfile( inspect.currentframe() ))[0],"..")))
|
||||
if cmd_subfolder not in sys.path:
|
||||
sys.path.insert(0, cmd_subfolder)
|
||||
|
||||
import mosq_test
|
||||
|
||||
rc = 1
|
||||
mid = 19
|
||||
keepalive = 60
|
||||
connect_packet = mosq_test.gen_connect("pub-dollar-test", keepalive=keepalive)
|
||||
connack_packet = mosq_test.gen_connack(rc=0)
|
||||
|
||||
publish_packet = mosq_test.gen_publish("$test/test", qos=1, mid=mid, payload="message")
|
||||
puback_packet = mosq_test.gen_puback(mid)
|
||||
|
||||
port = mosq_test.get_port()
|
||||
broker = mosq_test.start_broker(filename=os.path.basename(__file__), port=port)
|
||||
|
||||
try:
|
||||
sock = mosq_test.do_client_connect(connect_packet, connack_packet, port=port)
|
||||
mosq_test.do_send_receive(sock, publish_packet, puback_packet, "puback")
|
||||
|
||||
rc = 0
|
||||
|
||||
sock.close()
|
||||
finally:
|
||||
broker.terminate()
|
||||
broker.wait()
|
||||
(stdo, stde) = broker.communicate()
|
||||
if rc:
|
||||
print(stde)
|
||||
|
||||
exit(rc)
|
||||
|
||||
@ -0,0 +1,26 @@
|
||||
<!--
|
||||
.. title: Updated Debian Repository Backend
|
||||
.. slug: updated-debian-repository-backend
|
||||
.. date: 2018-08-08 23:00:43 UTC+01:00
|
||||
.. tags: Packaging
|
||||
.. category:
|
||||
.. link:
|
||||
.. description:
|
||||
.. type: text
|
||||
-->
|
||||
|
||||
The backend software for administering the Debian repository at
|
||||
https://repo.mosquitto.org/ has been migrated from `reprepro` to `aptly`. This
|
||||
has the benefit of allowing multiple versions of a package to remain in the
|
||||
repository.
|
||||
|
||||
For mosquitto, this now means that old versions of the Debian packages will
|
||||
remain available even after newer versions are published, and so you can depend
|
||||
on a particular version. The recommendation is always to use the latest version
|
||||
of course.
|
||||
|
||||
This change should be transparent to all current users, but there is the
|
||||
possibility that something is different between the two repository tools. If
|
||||
you do find a problem, please let us know.
|
||||
|
||||
The repository now has builds for versions 1.4.15 and 1.5.
|
||||
@ -0,0 +1,87 @@
|
||||
<!--
|
||||
.. title: Version 1.5.1 released
|
||||
.. slug: version-151-released
|
||||
.. date: 2018-08-16 17:01:08 UTC+01:00
|
||||
.. tags: Releases
|
||||
.. category:
|
||||
.. link:
|
||||
.. description:
|
||||
.. type: text
|
||||
-->
|
||||
|
||||
This is a bugfix release.
|
||||
|
||||
# Packaging changes
|
||||
|
||||
* The snap package now has support for websockets included.
|
||||
* The Windows packages have changed.
|
||||
- Support for Windows XP was dropped in Mosquitto 1.5, so the need for the
|
||||
Cygwin build has gone, and this has been dropped.
|
||||
- There are now 64-bit and 32-bit native packages.
|
||||
- Websockets support is included.
|
||||
- Threading support is not included in libmosquitto to simplify installation,
|
||||
alternative solutions are being looked into for the future.
|
||||
- The only external dependency is now OpenSSL.
|
||||
|
||||
# Version 1.5.1 changes
|
||||
|
||||
## Broker
|
||||
- Fix plugin cleanup function not being called on exit of the broker. Closes
|
||||
[#900].
|
||||
- Print more OpenSSL errors when loading certificates/keys fail.
|
||||
- Use `AF_UNSPEC` etc. instead of `PF_UNSPEC` to comply with POSIX. Closes
|
||||
[#863].
|
||||
- Remove use of `AI_ADDRCONFIG`, which means the broker can be used on systems
|
||||
where only the loopback interface is defined. Closes [#869], Closes [#901].
|
||||
- Fix IPv6 addresses not being able to be used as bridge addresses.
|
||||
Closes [#886].
|
||||
- All clients now time out if they exceed their keepalive\*1.5, rather than
|
||||
just reach it. This was inconsistent in two places.
|
||||
- Fix segfault on startup if bridge CA certificates could not be read.
|
||||
Closes [#851].
|
||||
- Fix problem opening listeners on Pi caused by unsigned char being default.
|
||||
Found via [#849].
|
||||
- ACL patterns that do not contain either `%c` or `%u` now produce a warning in
|
||||
the log. Closes [#209].
|
||||
- Fix bridge publishing failing when `per_listener_settings` was true. Closes
|
||||
[#860].
|
||||
- Fix `use_identity_as_username true` not working. Closes [#833].
|
||||
- Fix UNSUBACK messages not being logged. Closes [#903].
|
||||
- Fix possible endian issue when reading the `memory_limit` option.
|
||||
- Fix building for libwebsockets < 1.6.
|
||||
- Fix accessor functions for username and client id when used in plugin auth
|
||||
check.
|
||||
|
||||
## Library
|
||||
- Fix some places where return codes were incorrect, including to the
|
||||
`on_disconnect()` callback. This has resulted in two new error codes,
|
||||
`MOSQ_ERR_KEEPALIVE` and `MOSQ_ERR_LOOKUP`.
|
||||
- Fix connection problems when `mosquitto_loop_start()` was called before
|
||||
`mosquitto_connect_async()`. Closes [#848].
|
||||
|
||||
## Clients
|
||||
- When compiled using `WITH_TLS=no`, the default port was incorrectly being set
|
||||
to -1. This has been fixed.
|
||||
- Fix compiling on Mac OS X <10.12. Closes `#813` and `#240`.
|
||||
|
||||
## Build
|
||||
- Fixes for building on NetBSD. Closes `#258`.
|
||||
- Fixes for building on FreeBSD.
|
||||
- Add support for compiling with static libwebsockets library.
|
||||
|
||||
|
||||
[#209]: https://github.com/eclipse/mosquitto/issues/209
|
||||
[#240]: https://github.com/eclipse/mosquitto/issues/240
|
||||
[#258]: https://github.com/eclipse/mosquitto/issues/258
|
||||
[#813]: https://github.com/eclipse/mosquitto/issues/813
|
||||
[#833]: https://github.com/eclipse/mosquitto/issues/833
|
||||
[#848]: https://github.com/eclipse/mosquitto/issues/848
|
||||
[#849]: https://github.com/eclipse/mosquitto/issues/849
|
||||
[#851]: https://github.com/eclipse/mosquitto/issues/851
|
||||
[#860]: https://github.com/eclipse/mosquitto/issues/860
|
||||
[#863]: https://github.com/eclipse/mosquitto/issues/863
|
||||
[#869]: https://github.com/eclipse/mosquitto/issues/869
|
||||
[#886]: https://github.com/eclipse/mosquitto/issues/886
|
||||
[#900]: https://github.com/eclipse/mosquitto/issues/900
|
||||
[#901]: https://github.com/eclipse/mosquitto/issues/901
|
||||
[#903]: https://github.com/eclipse/mosquitto/issues/903
|
||||
@ -0,0 +1,59 @@
|
||||
<!--
|
||||
.. title: Security advisory: CVE-2018-12543
|
||||
.. slug: security-advisory-cve-2018-12543
|
||||
.. date: 2018-09-27 10:36:19 UTC+01:00
|
||||
.. tags: Security,Releases
|
||||
.. category:
|
||||
.. link:
|
||||
.. description:
|
||||
.. type: text
|
||||
-->
|
||||
|
||||
Mosquitto 1.5.3 has been released to address a security vulnerability. It also
|
||||
includes other bug fixes.
|
||||
|
||||
# CVE-2018-12543
|
||||
|
||||
A vulnerability exists in Mosquitto versions 1.5 to 1.5.2 inclusive, known as
|
||||
[CVE-2018-12543].
|
||||
|
||||
If a message received by the broker has a topic that begins with `$`, but that
|
||||
does not begin `$SYS`, an assert is triggered that should otherwise not be
|
||||
accessible, causing Mosquitto to exit.
|
||||
|
||||
The issue is fixed in Mosquitto 1.5.3. Patches for older versions are
|
||||
available at <https://mosquitto.org/files/cve/2018-12543>
|
||||
|
||||
The fix addresses the problem by reverting a commit that intended to remove
|
||||
some unused checks, but also stopped part of the topic hierarchy being created.
|
||||
|
||||
# Version 1.5.3 Changes
|
||||
|
||||
The complete list of fixes addressed in version 1.5.3 is:
|
||||
|
||||
## Security
|
||||
|
||||
* Fix [CVE-2018-12543]. If a message is sent to Mosquitto with a topic that
|
||||
begins with `$`, but is not `$SYS`, then an assert that should be unreachable
|
||||
is triggered and Mosquitto will exit.
|
||||
|
||||
## Broker
|
||||
* Elevate log level to warning for situation when socket limit is hit.
|
||||
* Remove requirement to use `user root` in snap package config files.
|
||||
* Fix retained messages not sent by bridges on outgoing topics at the first
|
||||
connection. Closes [#701].
|
||||
* Documentation fixes. Closes [#520], [#600].
|
||||
* Fix duplicate clients being added to by_id hash before the old client was
|
||||
removed. Closes [#645].
|
||||
* Fix Windows version not starting if `include_dir` did not contain any files.
|
||||
Closes [#566].
|
||||
|
||||
## Build
|
||||
* Various fixes to ease building.
|
||||
|
||||
[CVE-2018-12543]: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12543
|
||||
[#520]: https://github.com/eclipse/mosquitto/issues/520
|
||||
[#566]: https://github.com/eclipse/mosquitto/issues/566
|
||||
[#600]: https://github.com/eclipse/mosquitto/issues/600
|
||||
[#645]: https://github.com/eclipse/mosquitto/issues/645
|
||||
[#701]: https://github.com/eclipse/mosquitto/issues/701
|
||||
@ -0,0 +1,40 @@
|
||||
<!--
|
||||
.. title: Version 1.5.2 released
|
||||
.. slug: version-152-released
|
||||
.. date: 2018-09-19 18:18:36 UTC+01:00
|
||||
.. tags: Releases
|
||||
.. category:
|
||||
.. link:
|
||||
.. description:
|
||||
.. type: text
|
||||
-->
|
||||
|
||||
This is a bugfix release.
|
||||
|
||||
# Version 1.5.2 changes
|
||||
|
||||
## Broker
|
||||
- Fix build when using `WITH_ADNS=yes`.
|
||||
- Fix incorrect call to setsockopt() for `TCP_NODELAY`. Closes [#941].
|
||||
- Fix excessive CPU usage when the number of sockets exceeds the system limit.
|
||||
Closes [#948].
|
||||
- Fix for bridge connections when using `WITH_ADNS=yes`.
|
||||
- Fix `round_robin false` behaviour. Closes [#481].
|
||||
- Fix segfault on HUP when bridges and security options are configured.
|
||||
Closes [#965].
|
||||
|
||||
## Library
|
||||
- Fix situation where username and password is used with SOCKS5 proxy. Closes
|
||||
[#927].
|
||||
- Fix SOCKS5 behaviour when passing IP addresses. Closes [#927].
|
||||
|
||||
## Build
|
||||
- Make it easier to build without bundled uthash.h using `WITH_BUNDLED_DEPS=no`.
|
||||
- Fix build with OPENSSL_NO_ENGINE. Closes [#932].
|
||||
|
||||
[#481]: https://github.com/eclipse/mosquitto/issues/481
|
||||
[#927]: https://github.com/eclipse/mosquitto/issues/927
|
||||
[#932]: https://github.com/eclipse/mosquitto/issues/932
|
||||
[#941]: https://github.com/eclipse/mosquitto/issues/941
|
||||
[#948]: https://github.com/eclipse/mosquitto/issues/948
|
||||
[#965]: https://github.com/eclipse/mosquitto/issues/965
|
||||
Loading…
Reference in New Issue