openSUSE Leap 16.0 Mosquitto Essential Security Flaws RHSA-2026-20260-2

This update for mosquitto fixes the following issues:

Changes in mosquitto:

- update to 2.0.23 (boo#1258671)

* Fix handling of disconnected sessions for `per_listener_settings

true`

* Check return values of openssl *_get_ex_data() and

*_set_ex_data() to prevent possible crash. This could occur only

in extremely unlikely situations

* Check return value of openssl ASN1_string_[get0_]data()

functions for NULL. This prevents a crash in case of incorrect

certificate handling in openssl

* Fix potential crash on startup if a malicious/corrupt

persistence file from mosquitto 1.5 or earlier is loaded

* Limit auto_id_prefix to 50 characters

- Update to version 2.0.22

Broker

* Bridge: Fix idle_timeout never occurring for lazy bridges.

* Fix case where max_queued_messages = 0 was not treated as

unlimited.

* Fix --version exit code and output.

* Fix crash on receiving a $CONTROL message over a bridge, if

per_listener_settings is set true and...