it's recommended users update as quickly as possible to prevent a malicious user from triggering the issue and causing the server to go offline. note this does not affect mosquitto 1.4.x which is available on OPENBSD_6_3. thanks to upstream mosquitto for the heads-up