-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 29 May 2017 13:43:29 +0100
Source: mosquitto
Binary: mosquitto mosquitto-dev libmosquitto1 libmosquitto-dev libmosquittopp1
libmosquittopp-dev mosquitto-clients mosquitto-dbg libmosquitto1-dbg
libmosquittopp1-dbg
Architecture: source
Version: 1.4.10-3
Distribution: unstable
Urgency: high
Maintainer: Roger A. Light <ro...@atchoo.org>
Changed-By: Roger A. Light <ro...@atchoo.org>
Description:
libmosquitto-dev - MQTT version 3.1/3.1.1 client library, development files
libmosquitto1 - MQTT version 3.1/3.1.1 client library
libmosquitto1-dbg - debugging symbols for libmosquitto binaries
libmosquittopp-dev - MQTT version 3.1 client C++ library, development files
libmosquittopp1 - MQTT version 3.1/3.1.1 client C++ library
libmosquittopp1-dbg - debugging symbols for libmosquittopp binaries
mosquitto - MQTT version 3.1/3.1.1 compatible message broker
mosquitto-clients - Mosquitto command line MQTT clients
mosquitto-dbg - debugging symbols for mosquitto binaries
mosquitto-dev - Development files for Mosquitto
Closes: 857759
Changes:
mosquitto (1.4.10-3) unstable; urgency=high
.
* SECURITY UPDATE: Pattern ACL can be bypassed by using a username/client id
set to '+' or '#'.
- debian/patches/mosquitto-0.15_cve-2017-7650.patch: Reject send/receive
of messages to/from clients with a '+', '#' or '/' in their
username/client id.
- CVE-2017-7650
* New patch debian/patches/allow_ipv6_bridges.patch allows bridges to make
IPv6 connections when using TLS (closes: #857759).
Checksums-Sha1:
1a9abe0d479db354ab29561b8e076f0b14fc6068 2501 mosquitto_1.4.10-3.dsc
4f96df25e45db50d69106afebfa0078d9013babe 26368 mosquitto_1.4.10-3.debian.tar.xz
Checksums-Sha256:
6de637381d0e320ad94f7effd983b461a174f04ce2931638ab7689d0ff23e85f 2501
mosquitto_1.4.10-3.dsc
ecba2179b98e1956928a9d4da493bf7e23f7d83831b6940e22f27c812e0e8245 26368
mosquitto_1.4.10-3.debian.tar.xz
Files:
1e384b419b05d116feb99671caeaaa8e 2501 net optional mosquitto_1.4.10-3.dsc
dc6af7bc271e18eb75d7c0f53d16d369 26368 net optional
mosquitto_1.4.10-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=7O3t
-----END PGP SIGNATURE-----
