0MQ version 4.3.5 stable, released on 2023/10/09 Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete. libzmq is now distributed under the Mozilla Public License 2.0. Relicensing grants have been collected from all relevant authors, and some functionality has been clean-room reimplemented where that was not possible. In layman terms, the new license provides the same righ…
0MQ version 4.3.4 stable, released on 2021/01/17 New DRAFT (see NEWS for 4.2.0) socket option: ZMQ_PRIORITY will set the SO_PRIORITY socket option on the underlying sockets. Only supported on Linux. See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details. Fixed #4113 - compilation errors on kFreeBSD and GNU/Hurd Fixed #4086 - excessive amount of socket files left behind in Windows TMP di…
0MQ version 4.3.3 stable, released on 2020/09/07 Security advisories: CVE-2020-15166: Denial-of-Service on CURVE/ZAP-protected servers by unauthenticated clients. If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library,…
This is release 4.0.10
This is release 4.1.8
0MQ version 4.3.2 stable, released on 2019/07/08 CVE-2019-13132: a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encour…
This is release 4.0.9
This is release 4.1.7
0MQ version 4.3.1 stable, released on 2019/01/12 CVE-2019-6250: A vulnerability has been found that would allow attackers to direct a peer to jump to and execute from an address indicated by the attacker. This issue has been present since v4.2.0. Older releases are not affected. NOTE: The attacker needs to know in advance valid addresses in the peer's memory to jump to, so measures like ASLR are e…
0MQ version 4.3.0 stable, released on 2018/11/28 The following DRAFT APIs have been marked as STABLE and will not change anymore: ZMQ_MSG_T_SIZE context option (see doc/zmq_ctx_get.txt) ZMQ_THREAD_AFFINITY_CPU_ADD and ZMQ_THREAD_AFFINITY_CPU_REMOVE (Posix only) context options, to add/remove CPUs to the affinity set of the I/O threads. See doc/zmq_ctx_set.txt and doc/zmq_ctx_get.txt for details. Z…