diff --git a/www/pages/download.md b/www/pages/download.md index 9249f84b..2a9b54e0 100644 --- a/www/pages/download.md +++ b/www/pages/download.md @@ -11,8 +11,8 @@ # Source -* [mosquitto-1.5.3.tar.gz](https://mosquitto.org/files/source/mosquitto-1.5.3.tar.gz) (319kB) ([GPG signature](https://mosquitto.org/files/source/mosquitto-1.5.3.tar.gz.asc)) -* [mosquitto-1.5.3.tar.gz](https://www.eclipse.org/downloads/download.php?file=/mosquitto/source/mosquitto-1.5.3.tar.gz) (via Eclipse) +* [mosquitto-1.5.4.tar.gz](https://mosquitto.org/files/source/mosquitto-1.5.4.tar.gz) (319kB) ([GPG signature](https://mosquitto.org/files/source/mosquitto-1.5.4.tar.gz.asc)) +* [mosquitto-1.5.4.tar.gz](https://www.eclipse.org/downloads/download.php?file=/mosquitto/source/mosquitto-1.5.4.tar.gz) (via Eclipse) * [Git source code repository](https://github.com/eclipse/mosquitto) (github.com) Older downloads are available at [https://mosquitto.org/files/](../files/) @@ -25,8 +25,8 @@ distributions. ## Windows -* [mosquitto-1.5.3-install-windows-x64.exe](https://www.eclipse.org/downloads/download.php?file=/mosquitto/binary/win64/mosquitto-1.5.3-install-windows-x64.exe) (~360 kB) (64-bit build, Windows Vista and up, built with Visual Studio Community 2017) -* [mosquitto-1.5.3-install-windows-x32.exe](https://www.eclipse.org/downloads/download.php?file=/mosquitto/binary/win32/mosquitto-1.5.3-install-windows-x86.exe) (~360 kB) (32-bit build, Windows Vista and up, built with Visual Studio Community 2017) +* [mosquitto-1.5.4-install-windows-x64.exe](https://www.eclipse.org/downloads/download.php?file=/mosquitto/binary/win64/mosquitto-1.5.4-install-windows-x64.exe) (~360 kB) (64-bit build, Windows Vista and up, built with Visual Studio Community 2017) +* [mosquitto-1.5.4-install-windows-x32.exe](https://www.eclipse.org/downloads/download.php?file=/mosquitto/binary/win32/mosquitto-1.5.4-install-windows-x86.exe) (~360 kB) (32-bit build, Windows Vista and up, built with Visual Studio Community 2017) See also readme-windows.txt after installing. @@ -51,16 +51,6 @@ The available packages are: mosquitto, mosquitto-clients, libmosquitto1, libmosq * There are also Debian repositories provided by the mosquitto project, as described at -## openSUSE -Download the repository config file for your openSUSE version from below and -copy it to /etc/zypp/repos.d/ You'll now be able to install and keep mosquitto -up to date using the normal package management tools. - -The available packages are: mosquitto, mosquitto-clients, libmosquitto1, libmosquitto-devel, libmosquittopp1, libmosquittopp-devel, python-mosquitto. - -* [openSUSE 13.2](https://download.opensuse.org/repositories/home:/oojah:/mqtt/openSUSE_13.2/home:oojah:mqtt.repo) -* [openSUSE 13.1](https://download.opensuse.org/repositories/home:/oojah:/mqtt/openSUSE_13.1/home:oojah:mqtt.repo) - ## Raspberry Pi Mosquitto is available through the main repository. @@ -76,15 +66,6 @@ The available packages are: mosquitto, mosquitto-clients, libmosquitto1, libmosq * [RHEL 7](https://download.opensuse.org/repositories/home:/oojah:/mqtt/RedHat_RHEL-7/home:oojah:mqtt.repo) * [RHEL 6](https://download.opensuse.org/repositories/home:/oojah:/mqtt/RedHat_RHEL-6/home:oojah:mqtt.repo) -## SUSE Linux Enterprise Server -Add the appropriate repository to your package config from the list below, then install mosquitto from your normal package management tools. - -* [SLE 15](https://download.opensuse.org/repositories/home:/oojah:/mqtt/SLE_15/) -* [SLE 12 SP3](https://download.opensuse.org/repositories/home:/oojah:/mqtt/SLE_12_SP3/) -* [SLE 12 SP2](https://download.opensuse.org/repositories/home:/oojah:/mqtt/SLE_12_SP2/) -* [SLE 12 SP1](https://download.opensuse.org/repositories/home:/oojah:/mqtt/SLE_12_SP1/) -* [SLE 12](https://download.opensuse.org/repositories/home:/oojah:/mqtt/SLE_123/) - ## Ubuntu Mosquitto is available in the Ubuntu repositories so you can install as with any other package. If you are on an earlier version of Ubuntu or want a more @@ -98,24 +79,9 @@ from your package manager. # Other packages known to exist -## Arch Linux -* Mosquitto can be found in the community repository. - -## Fedora -Mosquitto is now available from Fedora directly. Use `yum install mosquitto`, -or search for "mosquitto" to find the related packages. - -## FreeBSD -Mosquitto is available for FreeBSD: https://www.freshports.org/net/mosquitto/ - -## Gentoo -Use `emerge mosquitto` - -## OpenWrt -If you're using a trunk snapshot use `opkg update; opkg install mosquitto` - -Karl Palsson maintains a set of feeds that may be more up to date than the -current OpenWrt version: - -* https://github.com/remakeelectric/owrt_pub_feeds - +* Arch Linux +* Fedora +* FreeBSD +* Gentoo +* OpenWrt +* OpenSUSE diff --git a/www/pages/security.md b/www/pages/security.md index c31eb300..7696dca9 100644 --- a/www/pages/security.md +++ b/www/pages/security.md @@ -19,6 +19,8 @@ follow the steps on [Eclipse Security] page to report it. Listed with most recent first. Further information on security related issues can be found in the [security category]. +* November 2018: No CVE assigned. Affecting versions **1.4** to **1.5.3** + inclusive, fixed in **1.5.4**. More details at [version-154-released]. * September 2018: [CVE-2018-12543] affecting versions **1.5** to **1.5.2** inclusive, fixed in **1.5.3**. * April 2018: [CVE-2017-7655] affecting versions **1.0** to **1.4.15** @@ -41,7 +43,7 @@ can be found in the [security category]. inclusive, fixed in **1.4.12**. More details at [security-advisory-cve-2017-7650]. - +[version-154-released]: /2018/11/version-154-released/ [security-advisory-cve-2018-12543]: /2018/09/security-advisory-cve-2018-12543/ [security-advisory-cve-2017-7651-cve-2017-7652]: /2018/02/security-advisory-cve-2017-7651-cve-2017-7652/ [security-advisory-cve-2017-7650]: /2017/05/security-advisory-cve-2017-7650/ diff --git a/www/posts/2018/11/version-154-released.md b/www/posts/2018/11/version-154-released.md new file mode 100644 index 00000000..7d0c9dd5 --- /dev/null +++ b/www/posts/2018/11/version-154-released.md @@ -0,0 +1,59 @@ + + +This is a bugfix and security release. + +# Version 1.5.4 changes + +## Security +- When using a TLS enabled websockets listener with `require_certificate` + enabled, the mosquitto broker does not correctly verify client certificates. + This is now fixed. All other security measures operate as expected, and in + particular non-websockets listeners are not affected by this. Closes [#996]. + +## Broker +- Process all pending messages even when a client has disconnected. This means + a client that send a PUBLISH then DISCONNECT quickly, then disconnects will + have its DISCONNECT message processed properly and so no Will will be sent. + Closes [#7]. +- $SYS/broker/clients/disconnected should never be negative. Closes [#287]. +- Give better error message if a client sends a password without a username. + Closes [#1015]. +- Fix bridge not honoring `restart_timeout`. Closes [#1019]. +- Don't disconnect a client if an auth plugin denies access to SUBSCRIBE. + Closes [#1016]. + +## Library +- Fix memory leak that occurred if `mosquitto_reconnect()` was used when TLS + errors were present. Closes [#592]. +- Fix TLS connections when using an external event loop with + `mosquitto_loop_read()` and `mosquitto_write()`. Closes [#990]. + +## Build +- Fix clients not being compiled with threading support when using CMake. + Closes [#983]. +- Header fixes for FreeBSD. Closes [#977]. +- Use `_GNU_SOURCE` to fix build errors in websockets and getaddrinfo usage. + Closes [#862] and [#933]. +- Fix builds on QNX 7.0.0. Closes [#1018]. + +[#7]: https://github.com/eclipse/mosquitto/issues/7 +[#287]: https://github.com/eclipse/mosquitto/issues/287 +[#592]: https://github.com/eclipse/mosquitto/issues/592 +[#933]: https://github.com/eclipse/mosquitto/issues/933 +[#977]: https://github.com/eclipse/mosquitto/issues/977 +[#983]: https://github.com/eclipse/mosquitto/issues/983 +[#990]: https://github.com/eclipse/mosquitto/issues/990 +[#996]: https://github.com/eclipse/mosquitto/issues/996 +[#1015]: https://github.com/eclipse/mosquitto/issues/1015 +[#1016]: https://github.com/eclipse/mosquitto/issues/1016 +[#1018]: https://github.com/eclipse/mosquitto/issues/1018 +[#1019]: https://github.com/eclipse/mosquitto/issues/1019