mosquitto: security bump to version 1.5.4

>From the announcement:

When using a TLS enabled websockets listener with require_certificate
enabled, the mosquitto broker does not correctly verify client certificates.
This is now fixed.  All other security measures operate as expected, and in
particular non-websockets listeners are not affected by this.

https://mosquitto.org/blog/2018/11/version-154-released/

Drop patch 0001, now applied upstream:
https://github.com/eclipse/mosquitto/pull/933

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

diff --git a/package/mosquitto/0001-_GNU_SOURCE-needed-for-EAI_INPROGRESS.patch b/package/mosquitto/0001-_GNU_SOURCE-needed-for-EAI_INPROGRESS.patch
deleted file mode 100644 (file)
index e350e46..0000000
--- a/package/mosquitto/0001-_GNU_SOURCE-needed-for-EAI_INPROGRESS.patch
+++ /dev/null
@@ -1,46 +0,0 @@
-From d684055b2b92e7ec5793e70c9a80c7f8e45e0696 Mon Sep 17 00:00:00 2001
-From: Bernd Kuhls <bernd.kuhls@t-online.de>
-Date: Fri, 24 Aug 2018 16:38:42 +0200
-Subject: [PATCH] _GNU_SOURCE needed for EAI_INPROGRESS
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-Define of _GNU_SOURCE is needed to be able to use EAI_INPROGRESS in
-loop.c.
-
-This patch fixes a build error
-
-loop.c:334:17: error: ‘EAI_INPROGRESS’ undeclared (first use in this function)
-        if(rc == EAI_INPROGRESS){
-
-occuring with a glibc-2.27-based buildroot toolchain for sparc64
-
-Target: sparc64-buildroot-linux-gnu
-[...]
-gcc version 6.4.0 (Buildroot 2018.05)
-
-Source:
-http://autobuild.buildroot.org/toolchains/tarballs/br-sparc64-full-2018.05.tar.bz2
-
-Patch sent upstream as PR 933.
-
-Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
----
- config.h | 2 ++
- 1 file changed, 2 insertions(+)
-
-diff --git a/config.h b/config.h
-index 7607019..ba0ba93 100644
---- a/config.h
-+++ b/config.h
-@@ -39,4 +39,6 @@
- #  define _POSIX_C_SOURCE 200809L
- #endif
- 
-+#define _GNU_SOURCE
-+
- #endif
--- 
-2.18.0
-

diff --git a/package/mosquitto/mosquitto.hash b/package/mosquitto/mosquitto.hash
index b38830b8b54be3e0928475d6b2a7e4e7dee234f8..96e2ae9369ff1eccf6524f948a08470401fcd48f 100644 (file)
--- a/package/mosquitto/mosquitto.hash
+++ b/package/mosquitto/mosquitto.hash
@@ -1,5 +1,5 @@
 # Locally calculated after checking gpg signature
-sha256 3081a998d303a883b1cd064009beabc88aa9159e26f5258a4ae6007160491d10  mosquitto-1.5.3.tar.gz
+sha256 5fd7f3454fd6d286645d032bc07f44a1c8583cec02ef2422c9eb32e0a89a9b2f  mosquitto-1.5.4.tar.gz
 
 # License files
 sha256 cc77e25bafd40637b7084f04086d606f0a200051b61806f97c93405926670bc1  LICENSE.txt

diff --git a/package/mosquitto/mosquitto.mk b/package/mosquitto/mosquitto.mk
index 1d72f9b16eb876d1d225d17a5a3594a6f5dc0f4a..fcce0535cb4646d69b3e45125e63bce95f351dd9 100644 (file)
--- a/package/mosquitto/mosquitto.mk
+++ b/package/mosquitto/mosquitto.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-MOSQUITTO_VERSION = 1.5.3
+MOSQUITTO_VERSION = 1.5.4
 MOSQUITTO_SITE = https://mosquitto.org/files/source
 MOSQUITTO_LICENSE = EPL-1.0 or EDLv1.0
 MOSQUITTO_LICENSE_FILES = LICENSE.txt epl-v10 edl-v10