Hello community, here is the log from the commit of package mosquitto for openSUSE:Factory checked in at 2018-10-29 14:21:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mosquitto (Old) and /work/SRC/openSUSE:Factory/.mosquitto.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mosquitto" Mon Oct 29 14:21:54 2018 rev:7 rq:644869 version:1.5.3 Changes: -------- --- /work/SRC/openSUSE:Factory/mosquitto/mosquitto.changes 2018-08-27 12:59:53.372851562 +0200 +++ /work/SRC/openSUSE:Factory/.mosquitto.new/mosquitto.changes 2018-10-29 14:58:32.681987555 +0100 @@ -1,0 +2,25 @@ +Thu Oct 25 18:06:26 UTC 2018 - [email protected] + +- Update to version 1.5.3 + Security: + * Fix CVE-2018-12543. If a message is sent to Mosquitto with a topic that + begins with $, but is not $SYS, then an assert that should be unreachable is + triggered and Mosquitto will exit. + Broker: + * Elevate log level to warning for situation when socket limit is hit. + * Fix retained messages not sent by bridges on outgoing topics at the first + connection. + * Fix duplicate clients being added to by_id hash before the old client was + removed. + +- Update to version 1.5.2 + Broker: + * Fix incorrect call to setsockopt() for TCP_NODELAY. + * Fix excessive CPU usage when the number of sockets exceeds the system limit. + * Fix round_robin false behaviour. + * Fix segfault on HUP when bridges and security options are configured. + Library: + * Fix situation where username and password is used with SOCKS5 proxy. + * Fix SOCKS5 behaviour when passing IP addresses. + +------------------------------------------------------------------- Old: ---- mosquitto-1.5.1.tar.gz New: ---- mosquitto-1.5.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mosquitto.spec ++++++ --- /var/tmp/diff_new_pack.d5z6Uf/_old 2018-10-29 14:58:33.529988969 +0100 +++ /var/tmp/diff_new_pack.d5z6Uf/_new 2018-10-29 14:58:33.533988976 +0100 @@ -27,7 +27,7 @@ %endif %bcond_without websockets Name: mosquitto -Version: 1.5.1 +Version: 1.5.3 Release: 0 Summary: A MQTT v3.1/v3.1.1 Broker License: EPL-1.0 ++++++ mosquitto-1.5.1.tar.gz -> mosquitto-1.5.3.tar.gz ++++++ ++++ 4801 lines of diff (skipped)
