kumquat-buildroot/package/mosquitto/mosquitto.hash

# Locally calculated after checking gpg signature
# from https://mosquitto.org/files/source/mosquitto-1.6.12.tar.gz.asc
sha256  548d73d19fb787dd0530334e398fd256ef3a581181678488a741a995c4f007fb  mosquitto-1.6.12.tar.gz

# License files
sha256  cc77e25bafd40637b7084f04086d606f0a200051b61806f97c93405926670bc1  LICENSE.txt
sha256  3b9be6b894d0769de796e653571ff6cef494913c0ce78c35a97db939e7d9087c  epl-v10
sha256  e8cf7d54ea46c19aba793983889b7f7425e1ebfcaaccec764a7db091646e203c  edl-v10
mosquitto: security bump to version 1.4.15 Fixes CVE-2017-7651: Unauthenticated clients can send a crafted CONNECT packet which causes large amounts of memory use in the broker. If multiple clients do this, an out of memory situation can occur and the system may become unresponsive or the broker will be killed by the operating system. The fix addresses the problem by limiting the permissible size for CONNECT packet, and by adding a memory_limit configuration option that allows the broker to self limit the amount of memory it uses. The hash of new tarball is not (yet) available through download.php, so use a locally calculated hash. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-03-01 00:11:40 +01:00			`# Locally calculated after checking gpg signature`
package/mosquitto: security bump to v1.6.12 Mosquitto 1.6.11 is a bugfix release, read the whole announcement on http://mosquitto.org/blog/2020/08/version-1-6-11-released/ Mosquitto 1.6.12 is a security and bugfix release, read http://mosquitto.org/blog/2020/08/version-1-6-12-released/ >From the 1.6.11 changelog of the client library: mosquitto_loop_start() now sets a thread name on Linux, FreeBSD, NetBSD, and OpenBSD. Closes #1777. This is done with pthread_setname_np; so mosquitto now requires BR2_TOOLCHAIN_HAS_THREADS_NPTL when built with threading support. 2 reverse dependencies use the threaded API, but they already depend on BR2_TOOLCHAIN_HAS_THREADS_NPTL: * domoticz [1] (we add a comment for mosquitto) * shairport-sync [2] [1] https://github.com/domoticz/domoticz/blob/2020.1/main/mosquitto_helper.cpp#L344 [2] https://github.com/mikebrady/shairport-sync/blob/3.3.6/mqtt.c#L227-L229 Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-08-29 15:06:10 +02:00			`# from https://mosquitto.org/files/source/mosquitto-1.6.12.tar.gz.asc`
			`sha256 548d73d19fb787dd0530334e398fd256ef3a581181678488a741a995c4f007fb mosquitto-1.6.12.tar.gz`
mosquitto: bump version to 1.4.14 Drop CVE 2017-9868 patch as that is now upstream. 1.4.14 is a bugfix release, fixing significant websocket performance / correctness issues. Use HTTPS for the download as the server uses HSTS, thus saving a redirect. While we're at it, add hashes for the license files. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-07-11 11:57:13 +02:00
			`# License files`
package/mosquitto: bump to v1.6.9 mosquitto 1.6.9 is a bugfix release, see the announcement: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Also update the indentation of the hash file to 2 spaces, and add URL of the GPG signature in hash file comment. Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-03-02 11:15:59 +01:00			`sha256 cc77e25bafd40637b7084f04086d606f0a200051b61806f97c93405926670bc1 LICENSE.txt`
			`sha256 3b9be6b894d0769de796e653571ff6cef494913c0ce78c35a97db939e7d9087c epl-v10`
			`sha256 e8cf7d54ea46c19aba793983889b7f7425e1ebfcaaccec764a7db091646e203c edl-v10`