kumquat-buildroot/package/mosquitto/mosquitto.hash

# Locally calculated after checking gpg signature
# from https://mosquitto.org/files/source/mosquitto-2.0.7.tar.gz.asc
sha256  a98054f0b8161588975ef24e1d467550d3935f4c16ccee63ecb623248a28356e  mosquitto-2.0.7.tar.gz

# License files
sha256  d3c4ccace4e5d3cc89d34cf2a0bc85b8596bfc0a32b815d0d77f9b7c41b5350c  LICENSE.txt
sha256  0becf16567beb77fa252b7664631dd177c8f9a1889e48995b45379c7130e5303  epl-v20
sha256  e8cf7d54ea46c19aba793983889b7f7425e1ebfcaaccec764a7db091646e203c  edl-v10
mosquitto: security bump to version 1.4.15 Fixes CVE-2017-7651: Unauthenticated clients can send a crafted CONNECT packet which causes large amounts of memory use in the broker. If multiple clients do this, an out of memory situation can occur and the system may become unresponsive or the broker will be killed by the operating system. The fix addresses the problem by limiting the permissible size for CONNECT packet, and by adding a memory_limit configuration option that allows the broker to self limit the amount of memory it uses. The hash of new tarball is not (yet) available through download.php, so use a locally calculated hash. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2018-03-01 00:11:40 +01:00			`# Locally calculated after checking gpg signature`
package/mosquitto: bump version to 2.0.7 Includes a number of bugfixes. For details, see the announcement: https://mosquitto.org/blog/2021/02/version-2-0-7-released/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2021-02-06 17:31:39 +01:00			`# from https://mosquitto.org/files/source/mosquitto-2.0.7.tar.gz.asc`
			`sha256 a98054f0b8161588975ef24e1d467550d3935f4c16ccee63ecb623248a28356e mosquitto-2.0.7.tar.gz`
mosquitto: bump version to 1.4.14 Drop CVE 2017-9868 patch as that is now upstream. 1.4.14 is a bugfix release, fixing significant websocket performance / correctness issues. Use HTTPS for the download as the server uses HSTS, thus saving a redirect. While we're at it, add hashes for the license files. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2017-07-11 11:57:13 +02:00
			`# License files`
package/mosquitto: bump version to 2.0.0 A new major version, see the announcement for details: https://mosquitto.org/blog/2020/12/version-2-0-0-released/ License has now changed to v2.0 of the Eclipse Public License, so update the license info and hashes to match. There is now optional cJSON support, so handle that. Add upstream post-2.0.0 patches fixing build with cJSON and without TLS support. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-12-06 11:48:05 +01:00			`sha256 d3c4ccace4e5d3cc89d34cf2a0bc85b8596bfc0a32b815d0d77f9b7c41b5350c LICENSE.txt`
			`sha256 0becf16567beb77fa252b7664631dd177c8f9a1889e48995b45379c7130e5303 epl-v20`
package/mosquitto: bump to v1.6.9 mosquitto 1.6.9 is a bugfix release, see the announcement: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Also update the indentation of the hash file to 2 spaces, and add URL of the GPG signature in hash file comment. Signed-off-by: Titouan Christophe <titouan.christophe@railnova.eu> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-03-02 11:15:59 +01:00			`sha256 e8cf7d54ea46c19aba793983889b7f7425e1ebfcaaccec764a7db091646e203c edl-v10`