Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[mosquitto-dev] Version 2.0.9 released

Dear all,

Versions 2.0.9, 1.6.14, and 1.5.11 have been released. These are
bugfix releases.

All releases include a minor security update. If the client library or
outgoing bridge connection only was given an empty or corrupt CA
certificate as the cafile (as opposed to capath) option when
configuring TLS, then the initial connection would initially fail, but
subsequent connections would succeed without the remote certificate
being verified. This issue was disclosed in public yesterday.

Other details here:

All packages provided by the project are updated and available.



Back to the top