Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
26f493ec by Salvatore Bonaccorso at 2019-11-16T22:51:39Z
Reference upstream blog entry for CVE-2019-1177{8,9}/mosquitto
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24096,6 +24096,7 @@ CVE-2019-11779 (In Eclipse Mosquitto 1.5.0 to 1.6.5
inclusive, if a malicious MQ
NOTE: Introduced by:
https://github.com/eclipse/mosquitto/commit/883af8af5379092097c6552a7a4a8c52409d2566
(v1.5)
NOTE: Fixed by:
https://github.com/eclipse/mosquitto/commit/106675093177335b18521bc0e5ad1d95343ad652
(1.6.6)
NOTE: Fixed by:
https://github.com/eclipse/mosquitto/commit/84681d9728ceb7f6ea2b6751b4d87200d8a62f14
(1.5.9)
+ NOTE: https://mosquitto.org/blog/2019/09/version-1-6-6-released/
CVE-2019-11778 (If an MQTT v5 client connects to Eclipse Mosquitto versions
1.6.0 to 1 ...)
- mosquitto 1.6.6-1
[buster] - mosquitto <not-affected> (Session expiry interval support
introduced in 1.6)
@@ -24105,6 +24106,7 @@ CVE-2019-11778 (If an MQTT v5 client connects to
Eclipse Mosquitto versions 1.6.
NOTE: https://github.com/eclipse/mosquitto/issues/1401
NOTE:
https://github.com/eclipse/mosquitto/commit/8407c6d146d1e8299127737d9735afc782e04ea8
NOTE:
https://github.com/eclipse/mosquitto/commit/6f3e7b9ceb43e2626a32340c26b69ac8ae5e9c8c
+ NOTE: https://mosquitto.org/blog/2019/09/version-1-6-6-released/
CVE-2019-11777 (In the Eclipse Paho Java client library version 1.2.0, when
connecting ...)
NOT-FOR-US: Eclipse Paho Java client
CVE-2019-11776 (In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows
Reflecte ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/26f493ec11235e6a83c96a5f7367dfe157d732d7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/26f493ec11235e6a83c96a5f7367dfe157d732d7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
