mosquitto(kirkstone): upgrade 2.0.18 -> 2.0.19 - #887
Open
fabrice-aeschbacher wants to merge 1 commit into
Open
Conversation
Copy link
Copy Markdown
Contributor
Sorry, something went wrong.
- Solves CVE-2024-8376 - removed 1571.patch and 2894.patch, already applied in v2.0.19 https://github.com/eclipse/mosquitto/blob/v2.0.19/ChangeLog.txt (cherry-picked from 25d0721) Signed-off-by: Fabrice Aeschbacher <fabrice.aeschbacher@siemens.com> Reviewed-by: Peter Marko <peter.marko@siemens.com>
Copy link
Copy Markdown
Contributor
|
@akuster could you please consider picking this PR? |
Sorry, something went wrong.
kraj
pushed a commit
to YoeDistro/meta-openembedded
that referenced
this pull request
Mar 30, 2025
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.1 This release fixes a packaging issue. Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.0 Features: adig: read arguments from adigrc. PR openembedded#856 Add new pending write callback optimization via ares_set_pending_write_cb. PR openembedded#857 New function ares_process_fds(). PR openembedded#875 Failed servers should be probed rather than redirecting queries which could cause unexpected latency. PR openembedded#877 adig: rework command line arguments to mimic dig from bind. PR openembedded#890 Add new method for overriding network functions ares_set_socket_function_ex() to properly support all new functionality. PR openembedded#894 Fix regression with custom socket callbacks due to DNS cookie support. PR openembedded#895 ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets PR openembedded#887 URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). PR openembedded#882 Changes: Connection handling modularization. PR openembedded#857, PR openembedded#876 Expose library/utility functions to tools. PR openembedded#860 Remove ares__ prefix, just use ares_ for internal functions. PR openembedded#872 Bugfixes: fix: potential WIN32_LEAN_AND_MEAN redefinition. PR openembedded#869 Fix googletest v1.15 compatibility. PR openembedded#874 Fix pkgconfig thread dependencies. PR openembedded#884 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
kraj
pushed a commit
to YoeDistro/meta-openembedded
that referenced
this pull request
Mar 31, 2025
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.1 This release fixes a packaging issue. Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.0 Features: adig: read arguments from adigrc. PR openembedded#856 Add new pending write callback optimization via ares_set_pending_write_cb. PR openembedded#857 New function ares_process_fds(). PR openembedded#875 Failed servers should be probed rather than redirecting queries which could cause unexpected latency. PR openembedded#877 adig: rework command line arguments to mimic dig from bind. PR openembedded#890 Add new method for overriding network functions ares_set_socket_function_ex() to properly support all new functionality. PR openembedded#894 Fix regression with custom socket callbacks due to DNS cookie support. PR openembedded#895 ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets PR openembedded#887 URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). PR openembedded#882 Changes: Connection handling modularization. PR openembedded#857, PR openembedded#876 Expose library/utility functions to tools. PR openembedded#860 Remove ares__ prefix, just use ares_ for internal functions. PR openembedded#872 Bugfixes: fix: potential WIN32_LEAN_AND_MEAN redefinition. PR openembedded#869 Fix googletest v1.15 compatibility. PR openembedded#874 Fix pkgconfig thread dependencies. PR openembedded#884 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
kraj
pushed a commit
to YoeDistro/meta-openembedded
that referenced
this pull request
Mar 31, 2025
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.1 This release fixes a packaging issue. Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.0 Features: adig: read arguments from adigrc. PR openembedded#856 Add new pending write callback optimization via ares_set_pending_write_cb. PR openembedded#857 New function ares_process_fds(). PR openembedded#875 Failed servers should be probed rather than redirecting queries which could cause unexpected latency. PR openembedded#877 adig: rework command line arguments to mimic dig from bind. PR openembedded#890 Add new method for overriding network functions ares_set_socket_function_ex() to properly support all new functionality. PR openembedded#894 Fix regression with custom socket callbacks due to DNS cookie support. PR openembedded#895 ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets PR openembedded#887 URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). PR openembedded#882 Changes: Connection handling modularization. PR openembedded#857, PR openembedded#876 Expose library/utility functions to tools. PR openembedded#860 Remove ares__ prefix, just use ares_ for internal functions. PR openembedded#872 Bugfixes: fix: potential WIN32_LEAN_AND_MEAN redefinition. PR openembedded#869 Fix googletest v1.15 compatibility. PR openembedded#874 Fix pkgconfig thread dependencies. PR openembedded#884 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
Copy link
Copy Markdown
Contributor
|
mosquitto version in kirkstone branch is v2.0.22 (6882334). We can close this PR |
Sorry, something went wrong.
kraj
pushed a commit
to YoeDistro/meta-openembedded
that referenced
this pull request
Jul 8, 2026
Changelog: =========== - Fix size_t overflow in 'amqp_decode_bytes' bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, openembedded#888) - Fix heap buffer overflow in 'amqp_frame_to_bytes' for oversized body frames (GHSA-hfjv-vcp3-39wh, openembedded#892) - 'librabbitmq-tools' fall back to the 'AMQP_URL' environment variable when no connection options are given on the command line (openembedded#887) - Fix undefined behavior in 'amqp_decode_properties' when decoding content-header property flags (openembedded#883, openembedded#885) - Fix 'ioctlsocket' type mismatch on Windows (openembedded#890) - Document buffer lifetime requirement of 'amqp_decode_table''s encoded buffer to prevent use-after-free misuse (openembedded#895) - 'librabbitmq-tools' now enable default SSL certificate verification paths unless '--no-default-cert-paths' is passed (fixes openembedded#868, openembedded#893) - Building the tools now requires POPT v1.14 or newer Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
https://github.com/eclipse/mosquitto/blob/v2.0.19/ChangeLog.txt
(cherry-picked from 25d0721)
Reviewed-by: Peter Marko peter.marko@siemens.com