Bump version, changelog and webpage.

CMakeLists.txt

@@ -8,7 +8,7 @@ cmake_minimum_required(VERSION 3.0)
 cmake_policy(SET CMP0042 NEW)
 
 project(mosquitto)
-set (VERSION 2.0.2)
+set (VERSION 2.0.3)
 
 list(APPEND CMAKE_MODULE_PATH "${CMAKE_SOURCE_DIR}/cmake/")
 

ChangeLog.txt

@@ -1,3 +1,11 @@
+2.0.3 - 2020-12-17
+==================
+
+Security:
+- Running mosquitto_passwd with the following arguments only
+  `mosquitto_passwd -b password_file username password` would cause the
+  username to be used as the password.
+
 Broker:
 - Fix excessive CPU use on non-Linux systems when the open file limit is set
   high. Closes #1947.

config.mk

@@ -125,7 +125,7 @@ WITH_XTREPORT=no
 
 # Also bump lib/mosquitto.h, CMakeLists.txt,
 # installer/mosquitto.nsi, installer/mosquitto64.nsi
-VERSION=2.0.2
+VERSION=2.0.3
 
 # Client library SO version. Bump if incompatible API/ABI changes are made.
 SOVERSION=1

include/mosquitto.h

@@ -59,7 +59,7 @@ extern "C" {
 
 #define LIBMOSQUITTO_MAJOR 2
 #define LIBMOSQUITTO_MINOR 0
-#define LIBMOSQUITTO_REVISION 2
+#define LIBMOSQUITTO_REVISION 3
 /* LIBMOSQUITTO_VERSION_NUMBER looks like 1002001 for e.g. version 1.2.1. */
 #define LIBMOSQUITTO_VERSION_NUMBER (LIBMOSQUITTO_MAJOR*1000000+LIBMOSQUITTO_MINOR*1000+LIBMOSQUITTO_REVISION)
 

installer/mosquitto.nsi

@@ -9,7 +9,7 @@
 !define env_hklm 'HKLM "SYSTEM\CurrentControlSet\Control\Session Manager\Environment"'
 
 Name "Eclipse Mosquitto"
-!define VERSION 2.0.2
+!define VERSION 2.0.3
 OutFile "mosquitto-${VERSION}-install-windows-x86.exe"
 
 InstallDir "$PROGRAMFILES\mosquitto"

installer/mosquitto64.nsi

@@ -9,7 +9,7 @@
 !define env_hklm 'HKLM "SYSTEM\CurrentControlSet\Control\Session Manager\Environment"'
 
 Name "Eclipse Mosquitto"
-!define VERSION 2.0.2
+!define VERSION 2.0.3
 OutFile "mosquitto-${VERSION}-install-windows-x64.exe"
 
 !include "x64.nsh"

set-version.sh

@@ -2,7 +2,7 @@
 
 MAJOR=2
 MINOR=0
-REVISION=2
+REVISION=3
 
 sed -i "s/^VERSION=.*/VERSION=${MAJOR}.${MINOR}.${REVISION}/" config.mk
 

snap/snapcraft.yaml

@@ -1,5 +1,5 @@
 name: mosquitto
-version: 2.0.2
+version: 2.0.3
 summary: Eclipse Mosquitto MQTT broker
 description: This is a message broker that supports version 5.0, 3.1.1, and 3.1 of the MQTT
     protocol.

www/pages/download.md

@@ -1,7 +1,7 @@
 <!--
 .. title: Download
 .. slug: download
-.. date: 2020-12-10 23:34:38 UTC
+.. date: 2020-12-17 14:21:38 UTC
 .. tags: tag
 .. category: category
 .. link: link
@@ -11,7 +11,7 @@
 
 # Source
 
-* [mosquitto-2.0.2.tar.gz](https://mosquitto.org/files/source/mosquitto-2.0.2.tar.gz) (319kB) ([GPG signature](https://mosquitto.org/files/source/mosquitto-2.0.2.tar.gz.asc))
+* [mosquitto-2.0.3.tar.gz](https://mosquitto.org/files/source/mosquitto-2.0.3.tar.gz) (319kB) ([GPG signature](https://mosquitto.org/files/source/mosquitto-2.0.3.tar.gz.asc))
 * [Git source code repository](https://github.com/eclipse/mosquitto) (github.com)
 
 Older downloads are available at [https://mosquitto.org/files/](../files/)
@@ -24,8 +24,8 @@ distributions.
 
 ## Windows
 
-* [mosquitto-2.0.1-install-windows-x64.exe](https://mosquitto.org/files/binary/win64/mosquitto-2.0.1-install-windows-x64.exe) (64-bit build, Windows Vista and up, built with Visual Studio Community 2019)
+* [mosquitto-2.0.3-install-windows-x64.exe](https://mosquitto.org/files/binary/win64/mosquitto-2.0.3-install-windows-x64.exe) (64-bit build, Windows Vista and up, built with Visual Studio Community 2019)
-* [mosquitto-2.0.1-install-windows-x32.exe](https://mosquitto.org/files/binary/win32/mosquitto-2.0.1-install-windows-x86.exe) (32-bit build, Windows Vista and up, built with Visual Studio Community 2019)
+* [mosquitto-2.0.3-install-windows-x32.exe](https://mosquitto.org/files/binary/win32/mosquitto-2.0.3-install-windows-x86.exe) (32-bit build, Windows Vista and up, built with Visual Studio Community 2019)
 
 Older installers can be found at [https://mosquitto.org/files/binary/](https://mosquitto.org/files/binary/).
 

www/pages/security.md

@@ -19,6 +19,10 @@ follow the steps on [Eclipse Security] page to report it.
 Listed with most recent first. Further information on security related issues
 can be found in the [security category].
 
+* December 2020: Running mosquitto_passwd with the following arguments only
+  `mosquitto_passwd -b password_file username password` would cause the
+  username to be used as the password. Affecting versions **2.0.0** to
+  **2.0.2** inclusive, fixed in **2.0.3**.
 * September 2019: [CVE-2019-11779]. Affecting versions **1.5** to **1.6.5**
   inclusive, fixed in **1.6.6** and **1.5.9**. More details at [version-166-released].
 * September 2019: [CVE-2019-11778]. Affecting versions **1.6** to **1.6.4**

www/posts/2020/12/version-2-0-3-released.md

@@ -0,0 +1,51 @@
+<!--
+.. title: Version 2.0.3 released.
+.. slug: version-2-0-1-released
+.. date: 2020-12-17 14:22:16 UTC+00:00
+.. tags: Releases
+.. category:
+.. link:
+.. description:
+.. type: text
+-->
+
+Version 2.0.3 of Mosquitto has been released. This is a bugfix release.
+
+# Security
+- Running mosquitto_passwd with the following arguments only
+  `mosquitto_passwd -b password_file username password` would cause the
+  username to be used as the password.
+
+# Broker
+- Fix excessive CPU use on non-Linux systems when the open file limit is set
+  high. Closes [#1947].
+- Fix LWT not being sent on client takeover when the existing session wasn't
+  being continued. Closes [#1946].
+- Fix bridges possibly not completing connections when WITH_ADNS is in use.
+  Closes [#1960].
+- Fix QoS 0 messages not being delivered if max_queued_messages was set to 0.
+  Closes [#1956].
+- Fix local bridges being disconnected on SIGHUP. Closes [#1942].
+- Fix slow initial bridge connections for WITH_ADNS=no.
+
+# Clients
+- Fix mosquitto_sub being unable to terminate with Ctrl-C if a successful
+  connection is not made. Closes [#1957].
+
+# Apps
+- Fix `mosquitto_passwd -b` using username as password (not if `-c` is also
+  used). Closes [#1949].
+
+# Build
+- Fix `install` target when using WITH_CJSON=no. Closes [#1938].
+- Fix `generic` docker build. Closes [#1945].
+
+[#1938]: https://github.com/eclipse/mosquitto/issues/1938
+[#1942]: https://github.com/eclipse/mosquitto/issues/1942
+[#1945]: https://github.com/eclipse/mosquitto/issues/1945
+[#1946]: https://github.com/eclipse/mosquitto/issues/1946
+[#1947]: https://github.com/eclipse/mosquitto/issues/1947
+[#1949]: https://github.com/eclipse/mosquitto/issues/1949
+[#1956]: https://github.com/eclipse/mosquitto/issues/1956
+[#1957]: https://github.com/eclipse/mosquitto/issues/1957
+[#1960]: https://github.com/eclipse/mosquitto/issues/1960