projects / buildroot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d0b0929) | patch
mosquitto: security bump to version 1.5.3
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Fri, 28 Sep 2018 21:22:07 +0000 (23:22 +0200)
committerPeter Korsgaard <peter@korsgaard.com>
Sun, 30 Sep 2018 08:38:34 +0000 (10:38 +0200)
commit5e62304359d150b6befa4bab4030ead09bcfdfdf
tree02ee5efb7b71a3fee366b2bd5f3c6db0a61f41c6tree
parentd0b0929e4bc4b8ac71088c551cd3868ee3a3009bcommit | diff
mosquitto: security bump to version 1.5.3

Fix CVE-2018-12543. If a message is sent to Mosquitto with a topic that
begins with $, but is not $SYS, then an assert that should be unreachable is
triggered and Mosquitto will exit.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/mosquitto/mosquitto.hash diff | blob | history
package/mosquitto/mosquitto.mk diff | blob | history