Public bug reported:
If a client publishes to the broker using a topic with a leading slash,
e.g. /foo this can lead to a memory leak.
The problem is fixed in v1.3.5 or v1.4, the best thing would be to
update to either of those. I have prepared a new branch with support for
1.4.
** Affects:
This was fixed a long time ago in mosquitto, the upload to vivid of
mosquitto-1.3.4 closes the bug.
** Changed in: mosquitto (Ubuntu)
Status: New = Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
The proposed branch depends on bug #1422623.
** Tags added: patch upgrade-software-version
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1423037
Title:
Mosquitto 1.3.4 has a memory leak
To manage
Public bug reported:
Version 1.3 of libwebsockets was released in July and has lots of bug
fixes and other improvements.
I have prepared an updated branch and will push it shortly.
** Affects: libwebsockets (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug
** Tags added: upgrade-software-version
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1422623
Title:
Update libwebsockets to latest upstream - 1.3
To manage notifications
This is a debdiff to update to version 1.4. It is the same as the bzr
branch, but doesn't have the file conflicts of course.
** Attachment added: update.debdiff.bz2
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1423037/+attachment/4325778/+files/update.debdiff.bz2
--
You received
It would be nice for this to be sync'd to get rid of the differences
between ubuntu and debian.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1487443
Title:
Sync mosquitto 1.4.3-1 (universe) from
I'll see about getting the necessary things attached to the bug.
I'd just like to point out though that this package was uploaded to
debian in advance of the import freeze but went into the NEW queue
because of an additional binary package (mosquitto-dev) consisting of
just a single C header
** Changed in: mosquitto (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1035328
Title:
Problem with last will message containing 0x00 bytes
To
** Changed in: mosquitto (Ubuntu)
Status: New => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1423037
Title:
Mosquitto 1.3.4 has a memory leak
To manage notifications about
I'm not quite sure how it went so long without this report being
spotted, sorry about that. Are you still having problems? At the moment
there isn't enough information to go on so I will close it as
"incomplete" at some point in the future unless you can give more
details.
--
You received this
** Changed in: mosquitto (Ubuntu)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1375131
Title:
TLS support missing
To manage notifications about this bug
** Changed in: mosquitto (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1495379
Title:
mosquitto C program not working with qos 0
To manage notifications
Thanks for the workaround.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1662552
Title:
snaps don't work with NFS home
To manage notifications about this bug go to:
Ok, thanks for the changes.
I've done build and runtime tests of the patches.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1700490
Title:
Persistence file is world readable
To manage
** Patch added: "yakkety-cve-2017-9868.debdiff"
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1700490/+attachment/4903459/+files/yakkety-cve-2017-9868.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Patch added: "xenial-cve-2017-9868.debdiff"
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1700490/+attachment/4903458/+files/xenial-cve-2017-9868.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Patch added: "zesty-cve-2017-9868.debdiff"
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1700490/+attachment/4903460/+files/zesty-cve-2017-9868.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Patch added: "trusty-cve-2017-9868.debdiff"
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1700490/+attachment/4903457/+files/trusty-cve-2017-9868.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
*** This bug is a security vulnerability ***
Public security bug reported:
If persistence is enabled (as it is by default on Ubuntu), the
mosquitto.db file is world readable.
This means any local user can access this file and potentially access
sensitive data.
This is CVE-2017-9868.
Artful is also affected, but I'm going to fix that with a new upstream
release.
** Changed in: mosquitto (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1700490
A fair point... The only files that mosquitto can create are a pid file
(if created then occurring before this call to umask), the persistence
file and log files. Having the log files readable by all would probably
be a bad thing as well.
--
You received this bug notification because you are a
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692818
Title:
Mosquitto pattern ACLs can be circumvented with special client ids
Calling mosquitto_disconnect() doesn't immediately disconnect the
client, it sends the DISCONNECT packet and once that packet is sent, it
then closes the socket. You can wait until the on_disconnect() callback
is triggered to make sure this has happened. Alternatively, calling
mosquitto_destroy()
I've been hit by this problem as well, but for the pread64 syscall. It's
working for me now after playing with my apt conf, getting the bug fix
and then reverting my apt conf, but thought it was worth mentioning
anyway.
I'm on a system with nfs/autofs home directories and nis for logins,
which I
Public bug reported:
First off, apologies there are lots of components this could be from, I
don't know which one.
If I click on a link in the Slack snap, nothing happens to open that
link. In the background, from what I can tell, a loop of `systemd
--user`, calling `xdg-open`, calling
Running xdg-open and kde-open5 on the command line directly work fine as
well, by the way.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1822973
Title:
Clicking link in slack snap under KDE causes
I haven't tried under gnome and I'm afraid I don't really want to mess
about with my main desktop to do so. I've tested again under kubuntu
18.04 and it works fine there.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Public bug reported:
One of the recent security patches for the 1.4.x series of Mosquitto
contained a mistake that can cause an attempted read from incorrect
memory, if a user has persistent data being saved to disk.
The attached patches fix the problem.
** Affects: mosquitto (Ubuntu)
Eduardo, I hope you don't mind me subscribing you to this, but it seems
like you would be the person best placed.
** Description changed:
One of the recent security patches for the 1.4.x series of Mosquitto
- contained a mistake that can cause and attempted read from incorrect
+ contained a
** Patch added: "cosmic2.debdiff"
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1815695/+attachment/5238142/+files/cosmic2.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1815695
** Patch added: "xenial2.debdiff"
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1815695/+attachment/5238143/+files/xenial2.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1815695
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1814931
Title:
Mosquitto CVE-2018-12551, CVE-2018-12550, CVE-2018-12546
To manage
Can you share what config you are using?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1815732
Title:
mosquitto 1.4.15-2ubuntu0.18.04.1 "Socket error on client ,
disconnecting."
To manage
Just to confirm, because Brian had a slightly different version number,
this still exists on 2.20.10-0ubuntu26.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1822966
Title:
apport-bug locks up when
It might also be worth noting that clicking links in the telegram snap
in the session work fine.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1822973
Title:
Clicking link in slack snap under KDE
This is no longer an issue in recent Ubuntu releases.
** Changed in: libxslt (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1272380
Title:
Missing
Public bug reported:
The valgrind tool `dhat` provides some helpers for viewing its output:
dh_view.html, dh_view.css, dh_view.js
These aren't currently provided in the 3.15.0-1ubuntu3.1 package, it
would be nice if this was fixed.
** Affects: valgrind (Ubuntu)
Importance: Undecided
Awesome, thanks for the quick response :)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1856067
Title:
valgrind doesn't install dhat helper files
To manage notifications about this bug go to:
Public bug reported:
Please sync mosquitto 1.6.7-1 (universe) from Debian unstable (main)
Version 1.6.6 introduced a regression in libmosquitto that prevents all clients
from working that use the threaded network interface. This stops mosquitto_pub
from working, as well as any third party
Update:
If I go to System Settings/Display and Monitor, then click "Identify",
then only the primary monitor is identified.
I tried disabling the secondary monitor and re-enabling it, and that
fixed the problem as well for this session.
--
You received this bug notification because you are a
Public bug reported:
I have a primary monitor in landscape mode, and a secondary monitor in
portrait mode, rotated 90 degrees anticlockwise.
* Open system settings and go to display configuration
* Select the secondary monitor
* Uncheck "Enabled"
* Click Apply
* Check "Enabled"
* -> Secondary
I can now reproduce this from within the session.
* Starting point - everything is displaying as expected.
* Open System Settings/Display Configuration
* Disable the secondary monitor and click Apply
* Enable the secondary monitor (this will have reverted to landscape mode) and
click Apply
* ->
** Summary changed:
- Second monitor starts up black
+ Secondary monitor black after rotation
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868704
Title:
Secondary monitor black after rotation
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2758
** Bug watch added: gitlab.gnome.org/GNOME/gnome-shell/-/issues #2758
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2758
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
Public bug reported:
I have two monitors, a landscape 1680x1050 (main monitor) and a portrait
1920x1080, rotated 90 degrees anticlockwise (secondary monitor). Nvidia
graphics card, with the proprietary drivers.
When I log in, the secondary monitor is entirely black. If I move my
mouse to the
Public bug reported:
I installed 20.04 stock to VirtualBox and clicking the "3x3 grid of
dots" button bottom left of the desktop brings up applications to chose
from, but the "Frequent All" UI elements are jiggling up and down.
This only seems to happen at 800x600.
Public bug reported:
I recently tried to do a fresh install of Kubuntu 20.04 over the top of
an existing installation.
sda - Windows install
sdb - Windows spinning disk
sdc - Linux disk, partitioned into / and /home
Because I didn't want to trash /home, I had to choose manual
partitioning. I
I have just experienced this on Kubuntu 20.04. I have an nvidia card and
apt just upgraded the nvidia drivers. I wonder if that is related. After
the upgrade, blender refuses to start, stating that there is no
supported graphics card so *something* has changed there.
--
You received this bug
Public bug reported:
Resizing the konsole window to be smaller using the bottom right hand
corner when running hexedit can sometimes result in a crash. In my
testing the window starts at around 232x61. I find it easiest to trigger
the bug if I make circular resizing movements, but this isn't
I'm no longer on 20.04 so can't confirm whether it is still present
there (it's still a supported release, right?). It must have been fixed
in the interim because it no longer affects me on 23.10. I guess since
nobody else seems to have been affected then this can be closed as
fixed.
--
You
Ah, yes, sorry I forgot there was difference with the flavours.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868704
Title:
Secondary monitor black after rotation
To manage notifications about
Public bug reported:
Homepage: http://atchoo.org/tools/ralcalc/
License: GPLv3
** Affects: ubuntu
Importance: Undecided
Assignee: Roger Light (roger.light)
Status: In Progress
** Changed in: ubuntu
Assignee: (unassigned) = Roger Light (roger.light)
Status: New
** Changed in: ubuntu
Status: In Progress = Invalid
--
[needs-packaging] ralcalc
https://bugs.launchpad.net/bugs/314236
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
I'd agree that Deleted items folder isn't the best solution,
especially in the example given, but on the other hand as someone who
lives in England I'm pretty certain that I've never once said
wastebasket. In my opinion the correct term should be Rubbish bin.
--
Deleted items folder name doesn't
Public bug reported:
The currently packaged version of mosquitto is 0.12. Version 0.15 is
available with many new features and important bug fixes.
0.15 is packaged for debian but I have been unable to get sponsorship
replies so far.
** Affects: mosquitto (Ubuntu)
Importance: Undecided
** Branch linked: lp:~roger.light/ubuntu/precise/mosquitto/0.15-fixes
** Branch unlinked: lp:~roger.light/ubuntu/precise/mosquitto/bug-928556
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/928556
** Branch unlinked: lp:~roger.light/ubuntu/precise/mosquitto/bug-836005
** Branch linked: lp:~roger.light/ubuntu/precise/mosquitto/0.15-fixes
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/836005
** Branch linked: lp:~roger.light/ubuntu/precise/mosquitto/0.15-fixes
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/817175
Title:
Mosquitto should use upstart instead of sysv.
To manage
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/836005
Title:
mosquitto should package apparmor profile
To manage notifications about this bug go to:
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/817175
Title:
Mosquitto should use upstart instead of sysv.
To manage notifications about this bug go to:
Public bug reported:
See summary. Patch to follow.
** Affects: mosquitto (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/817175
Title:
Public bug reported:
An apparmor profile for mosquitto is provided in its tar ball, but isn't
used in the packaging. It should be checked and included to enhance
security.
** Affects: mosquitto (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification
Public bug reported:
Please sync mosquitto 0.11.3-1 (universe) from Debian unstable (main)
Changelog entries since current oneiric version 0.10-1:
mosquitto (0.11.3-1) unstable; urgency=low
* New upstream release: http://mosquitto.org/2011/07/version-0-11-3-released/
* Fix init script
: ubuntu
Importance: Undecided
Assignee: Roger Light (roger.light)
Status: New
** Tags: needs-packaging
--
[needs-packaging] sqlite3-pcre
https://bugs.launchpad.net/bugs/518502
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu
** Changed in: ubuntu
Assignee: (unassigned) = Roger Light (roger.light)
--
[needs-packaging] sqlite3-pcre
https://bugs.launchpad.net/bugs/518502
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu
It appears to be ok now in 13.10.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1121447
Title:
Evince segfaults when run from command line
To manage notifications about this bug go to:
I tested the fix originally, but then I'm the one who made the fix.
To be honest, this version is so out of date that it's unlikely anybody
else will verify the change. It's just a not very nice bug to leave in
for anybody who doesn't find their way to the up to date ppa.
--
You received this
Public bug reported:
If I run evince from the command line like below then change focus from
any window to the Terminal window, evince segfaults.
evince example.pdf
The backtrace from gdb is:
#0 0x00d83794 in XVisualIDFromVisual (visual=0x0) at ../../src/Misc.c:60
#1 0x002b4521 in
Public bug reported:
I am generating man pages from docbook xml using xsltproc and
/usr/share/xml/docbook/stylesheet/docbook-xsl/manpages/docbook.xsl
My man page contains entries like this for the See Also section:
citerefentry
There is a package awaiting review on mentors.debian.net.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1037892
Title:
mosquitto: New upstream version available - 1.0.1
To manage notifications
** Also affects: mosquitto (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/972389
Title:
Mosquitto crashes using bad version of protocol
To
This has now been fixed:
https://bitbucket.org/oojah/mosquitto/changeset/2272f88cf9e117b0b44ce819f22cc14191ab6f90
It'd be great if you could confirm that it works for you (use
https://bitbucket.org/oojah/mosquitto/get/0.16.bz2 ).
Thanks again.
** Also affects: mosquitto (Ubuntu)
Importance:
Great, thanks!
Yes, it is the same in Raring but my plan was to fix it by getting a
more up to date version included. I've made some changes to the
packaging that reduce the differences between Debian and Ubuntu and was
leaving it a while before attempting to push it to experimental/directly
to
** Description changed:
[Impact]
+ Remote clients can cause the broker to crash, meaning a DoS for other
clients. The bug is caused by a double free() so no chance of buffer overrun or
other security issue.
[Fix]
+ Remove the incorrect memory free call.
[Test Case]
[Regression
** Changed in: mosquitto
Status: Fix Committed = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1035328
Title:
Problem with last will message containing 0x00 bytes
To manage
** Changed in: mosquitto
Status: Fix Committed = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/972389
Title:
Mosquitto crashes using bad version of protocol
To manage
** Branch linked: lp:~roger.light/ubuntu/utopic/mosquitto/merge-
debian-1.3.4-2
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1358019
Title:
Merge mosquitto 1.3.4-2 (universe) from Debian unstable
I've carried out the merge in the linked branch. I was wrong before, the
Debian package does include the Replaces lines, so it's only the
apparmor profile that is ubuntu specific.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Public bug reported:
Please sync mosquitto 1.3.4-2 (universe) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* Merge from Debian unstable. Remaining changes:
- Install apparmor profile.
- Replace init script with upstart script.
*
This also closes bugs #1037892 and #1035328.
The Debian packaging changed so that the dev packages were not
versioned, so it would be best to update debian/control to make
libmosquitto-dev replace libmosquitto0-dev and libmosquittopp-dev
replace libmosquittopp0-dev.
--
You received this bug
The version of mosquitto currently in ubuntu doesn't have TLS support
full stop.
There is an open bug about getting a more recent version of mosquitto
into ubuntu:
https://bugs.launchpad.net/ubuntu/+source/mosquitto/+bug/1358019
--
You received this bug notification because you are a member of
82 matches
Mail list logo
