Version 2.0.19 of Mosquitto has been released. This is a security and bugfix release.

Security

  • Fix mismatched subscribe/unsubscribe with normal/shared topics.
  • Fix crash on bridge using remapped topic being sent a crafted packet.
  • Don't allow SUBACK with missing reason codes in client library.

Broker

  • Fix assert failure when loading a persistence file that contains subscriptions with no client id.
  • Fix local bridges being incorrectly expired when persistent_client_expiration is in use.
  • Fix use of CLOCK_BOOTTIME for getting time. Closes #3089.
  • Fix mismatched subscribe/unsubscribe with normal/shared topics.
  • Fix crash on bridge using remapped topic being sent a crafted packet.

Client library

  • Fix some error codes being converted to string as "unknown". Closes #2579.
  • Clear SSL error state to avoid spurious error reporting. Closes #3054.
  • Fix "payload format invalid" not being allowed as a PUBREC reason code.
  • Don't allow SUBACK with missing reason codes.

Build

  • Thread support is re-enabled on Windows.