mosquitto: security bump to version 1.4.8

This includes a fix for a security related bug related to the listener
mount_point feature.  The bug allows a client that is restricted to a
mount_point to publish messages outside this hierarchy using the last will
and testament feature.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

diff --git a/package/mosquitto/mosquitto.hash b/package/mosquitto/mosquitto.hash
index a8de658d3dc638fb069f8dda320715435504d1d7..861136b6ad0120d376e5b81ca91db8e515ba665c 100644 (file)
--- a/package/mosquitto/mosquitto.hash
+++ b/package/mosquitto/mosquitto.hash
@@ -1,2 +1,2 @@
 # Locally calculated after checking pgp signature
-sha256  71a1cb37893403e00b7db85c5db4af50b40d055ce61e5d21092c2594f2023b8b  mosquitto-1.4.7.tar.gz
+sha256  d96eb5610e57cc3e273f4527d3f54358ab7711459941a9e64bc4d0a85c2acfda  mosquitto-1.4.8.tar.gz

diff --git a/package/mosquitto/mosquitto.mk b/package/mosquitto/mosquitto.mk
index d6a5fb2b65cf0975524d417e4d6bc3f789c855f6..dfef6e509d51ef37116565be851aaa7961771d74 100644 (file)
--- a/package/mosquitto/mosquitto.mk
+++ b/package/mosquitto/mosquitto.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-MOSQUITTO_VERSION = 1.4.7
+MOSQUITTO_VERSION = 1.4.8
 MOSQUITTO_SITE = http://mosquitto.org/files/source
 MOSQUITTO_LICENSE = EPLv1.0 or EDLv1.0
 MOSQUITTO_LICENSE_FILES = LICENSE.txt epl-v10 edl-v10