[mosquitto-dev] Version 2.0.9 released

[Roger Light <roger@xxxxxxxxxx>]

Dear all,

Versions 2.0.9, 1.6.14, and 1.5.11 have been released. These are
bugfix releases.

All releases include a minor security update. If the client library or
outgoing bridge connection only was given an empty or corrupt CA
certificate as the cafile (as opposed to capath) option when
configuring TLS, then the initial connection would initially fail, but
subsequent connections would succeed without the remote certificate
being verified. This issue was disclosed in public yesterday.

Other details here: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

All packages provided by the project are updated and available.

Regards,

Roger