Version 1.27.2 is a security release:
- Fix cross-thread memory issue in log deduplicator of
retained_messages_node_creation_limitand related settings, introduced in version 1.27.1. Issue only exists when using non-default settings. - Fix incorrect topics strings in log messages about reaching retained message limits when the topic starts with a leading
/. - Fix shared subscription path like
'$share/sharename//two/three'being parsed astwo/threeinstead of/two/three. Not really a security concern however, because the auth check is performed on the parsed result, and clients are free to send subscribe packets with any filter anyway.