Mosquitto broker 7.1.0 amd64 segfaults in libcjson before reading configuration

[shahahmad099]

Mosquitto broker app 7.1.0 amd64 binary segfaults in libcjson before configuration is read

Describe the issue you are experiencing

The official Mosquitto broker app 7.1.0 amd64 image exits with signal 11 during startup. The failure is reproducible by invoking the image's mosquitto binary with -h, so it occurs before the Home Assistant app configuration or broker data is involved. Kernel output identifies libcjson.so.1.7.18 as the crashing library.

The official 7.0.1 amd64 image works on the same HAOS host. MQTT service was recovered without modifying broker data by retaining the broken 7.1.0 image under a diagnostic tag and temporarily mapping the working official 7.0.1 image to the Supervisor-managed 7.1.0 tag.

Environment

• Installation: Home Assistant OS
• Operating system: HAOS 18.0 (ova, amd64)
• Home Assistant Core: 2026.7.3
• Supervisor: 2026.07.3
• App: Mosquitto broker
• Failing app version: 7.1.0
• Working comparison: 7.0.1
• Host CPU: Intel N100

Steps to reproduce the issue

1. Pull or install the official amd64 Mosquitto broker 7.1.0 image.

2. Run the binary without Home Assistant data or configuration:

   docker run --rm --entrypoint /usr/local/sbin/mosquitto homeassistant/amd64-addon-mosquitto:7.1.0 -h

3. Observe exit status 139 / signal 11 and a kernel segfault in libcjson.so.1.7.18.

4. Run the equivalent command with the official 7.0.1 image; it prints help and exits normally.

The failure also reproduces with an empty or /dev/null configuration, confirming it is not caused by the existing broker data or app options.

System Health information

arch: amd64
board: ova
installation_type: Home Assistant OS
os_version: 18.0
home_assistant_core: 2026.7.3
supervisor: 2026.07.3

App/host logs and image identity

mosquitto[...] segfault at 7 ... in libcjson.so.1.7.18
exit status: 139

• Official failing image ID/digest: sha256:38fcc7806aacc72ac0077fedec62cd8fb8c98b6708b1a8b0a532be2350fb7420
• Failing mosquitto binary SHA-256: c1dffbe994defdfb903a54a9d417b97d7e5f15da61f3e7e9488424016215ed25
• Working official 7.0.1 image ID: sha256:01e9e20c5a64792e2b80614c583428cde20ae5d28c97398f26cddafc3ae819a3

Additional information

• The 7.1.0 image was confirmed current before reproduction; the same digest was retained locally as 7.1.0-broken-20260722 for diagnosis.
• Supervisor currently reports app version 7.1.0 because of the temporary local tag workaround, but the running binary is from the official 7.0.1 image.
• Broker data and credentials are not included in this report.