Hi Ola, On Sun, 1 Apr 2018, Ola Lundqvist wrote:
The two CVEs are still reported as unfixed however. I just checked a minute ago. Please check by running the triage script yourself to see it.
I did: debian@devel:~/debian-security/security-tracker$ bin/lts-cve-triage.py --skip-dla-needed --exclude undetermined|grep mosquitto debian@devel:~/debian-security/security-tracker$ So on my side everything seems to be fine!? Thorsten
