-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Oct 2019 19:03:02 +0200 Source: mosquitto Binary: mosquitto libmosquitto1 libmosquitto-dev libmosquittopp1 libmosquittopp-dev mosquitto-clients python-mosquitto python3-mosquitto mosquitto-dbg Architecture: source amd64 all Version: 1.3.4-2+deb8u4 Distribution: jessie-security Urgency: high Maintainer: Roger A. Light <roger@atchoo.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: libmosquitto-dev - MQTT version 3.1 client library, development files libmosquitto1 - MQTT version 3.1 client library libmosquittopp-dev - MQTT version 3.1 client C++ library, development files libmosquittopp1 - MQTT version 3.1 client C++ library mosquitto - MQTT version 3.1/3.1.1 compatible message broker mosquitto-clients - Mosquitto command line MQTT clients mosquitto-dbg - debugging symbols for mosquitto binaries python-mosquitto - MQTT version 3.1 Python client library python3-mosquitto - MQTT version 3.1 Python 3 client library Changes: mosquitto (1.3.4-2+deb8u4) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-11779 Fix for processing a crafted SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters. (setting TOPIC_HIERARCHY_LIMIT to 200) * CVE-2018-12550 An ACL file with no statements was treated as having a default allow policy. The new behaviour of an empty ACL file is a default policy of access denied. (this is in compliance with all newer releases) * CVE-2018-12551 Malformed authentication data in the password file could allow clients to circumvent authentication and get access to the broker. * CVE-2017-7655 A Null dereference vulnerability in the Mosquitto library could lead to crashes for those applications using the library. Checksums-Sha1: 8e615eec8d678a2370dcde12dd5b1c1f844ed48f 2634 mosquitto_1.3.4-2+deb8u4.dsc b818672cc0db723995d7c3201ef6962931dd891a 351761 mosquitto_1.3.4.orig.tar.gz b8f7db14c91d4a08db75eac121b9ecea2155e97a 30036 mosquitto_1.3.4-2+deb8u4.debian.tar.xz b006bb4657cd41f9007bdb46ba685f8141bff45f 113378 mosquitto_1.3.4-2+deb8u4_amd64.deb 1bcd129f14928dfd50d2dcfa3210631b8644972c 42704 libmosquitto1_1.3.4-2+deb8u4_amd64.deb b4320c7ae495c6841020b0097d75d00fa6d0e24e 33222 libmosquitto-dev_1.3.4-2+deb8u4_all.deb d9a84740766d97e56cd64e03c4d30903a7a4f4a6 25594 libmosquittopp1_1.3.4-2+deb8u4_amd64.deb aefe54460863fb44decb79971209e27d743d21c5 21878 libmosquittopp-dev_1.3.4-2+deb8u4_all.deb 934c7e52be3f5d10f7a8b4f1eab1d51ad5ec5337 41812 mosquitto-clients_1.3.4-2+deb8u4_amd64.deb a0743dbc5c549cdd7cc830487f4a707dc6d130c2 35438 python-mosquitto_1.3.4-2+deb8u4_all.deb bdfca72ee3f84f802c8835b2cf7ccd711e2fab91 35502 python3-mosquitto_1.3.4-2+deb8u4_all.deb 0bb42d9088ef233609f15c0ab604fbe3d80eafe0 545830 mosquitto-dbg_1.3.4-2+deb8u4_amd64.deb Checksums-Sha256: 4c4299e8b8b59d8499eb584da46b0073c0f5591c01510461e34bb7c4deee4998 2634 mosquitto_1.3.4-2+deb8u4.dsc 0a3982d6b875a458909c8828731da04772035468700fa7eb2f0885f4bd6d0dbc 351761 mosquitto_1.3.4.orig.tar.gz 6b5daf902d1534d27aacc91bd8e2da1691d21b5354f2b889ace625bfe989ea87 30036 mosquitto_1.3.4-2+deb8u4.debian.tar.xz b70042cfe00bd54b719900ba282b06b8cff98dddea95c410e04ee3460e7e472e 113378 mosquitto_1.3.4-2+deb8u4_amd64.deb 6244948b0952dd86c2d9dad0b3b6ed115033d632376165141d6f3ebea4aa79a5 42704 libmosquitto1_1.3.4-2+deb8u4_amd64.deb 6f8673fdc05ab96328f4ee681ec22df49996ef5ca0cc8251b57c718997ba668b 33222 libmosquitto-dev_1.3.4-2+deb8u4_all.deb deb13359474cad4fa376bc80951f2c5592e2f6aac8647cc1155fb376d8245264 25594 libmosquittopp1_1.3.4-2+deb8u4_amd64.deb 40aa0d15a0529b516dcb333a9854879c2fdb23ee07929ed4215d8115bcd8a0ce 21878 libmosquittopp-dev_1.3.4-2+deb8u4_all.deb 704a9ad50e61be8f256af884ee56ede71a8e5c9fba779ed480203658f9c4e4c2 41812 mosquitto-clients_1.3.4-2+deb8u4_amd64.deb b04316c83410a90251beef879c068a345338dc7fb55e0286cfc73e1958ca8af9 35438 python-mosquitto_1.3.4-2+deb8u4_all.deb f108ebf66a2f4dce9e7780e447481c4210828ab772a7b0ba317e20faa695fc33 35502 python3-mosquitto_1.3.4-2+deb8u4_all.deb b31b064fb757582c5360ac34d83dd82b9cc41ed162dd67a639889267e01e5d21 545830 mosquitto-dbg_1.3.4-2+deb8u4_amd64.deb Files: 09cc4ba6220138f8c3c893e9527d5ade 2634 net optional mosquitto_1.3.4-2+deb8u4.dsc 9d729849efd74c6e3eee17a4a002e1e9 351761 net optional mosquitto_1.3.4.orig.tar.gz e27b28f376fc8b7828fa91f71508b40a 30036 net optional mosquitto_1.3.4-2+deb8u4.debian.tar.xz 922fab2d1c6c9ab1b6040aec808f63c4 113378 net optional mosquitto_1.3.4-2+deb8u4_amd64.deb a3d914c28c958c6822751bf0c83d944f 42704 libs optional libmosquitto1_1.3.4-2+deb8u4_amd64.deb 6e9c6685ea2a5e711dfba59ad3a24335 33222 libdevel optional libmosquitto-dev_1.3.4-2+deb8u4_all.deb 3e006cd74eb92735f1ce45a5a392ab0a 25594 libs optional libmosquittopp1_1.3.4-2+deb8u4_amd64.deb c98ddab6a372b474048f4936e59f859a 21878 libdevel optional libmosquittopp-dev_1.3.4-2+deb8u4_all.deb efffe90332ce76f58138b07114e0d7bc 41812 net optional mosquitto-clients_1.3.4-2+deb8u4_amd64.deb 8d0d1b9fc1c87a27430d76e73401f4e1 35438 python optional python-mosquitto_1.3.4-2+deb8u4_all.deb 6670b277117a9c66f024430b6364b4ec 35502 python optional python3-mosquitto_1.3.4-2+deb8u4_all.deb 1f33a32842ecb51e1a534d4bf7f3fa83 545830 debug extra mosquitto-dbg_1.3.4-2+deb8u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl20iXhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRxYED/4+zJaiHcY/gpGV252kXQBoJ/j09WjZ eLFrH9P8Tb7edp/m1dUXmBHESqTWQOsn52slwFN3Puv3A+j9gdPrpwE9vwhz/4jk weXptRa4B22YbNf7Y5ALekIbv5IfwNDkYCuZGpDk9B7p3Rmpub1s0vQiMSTganWd pGR2IRLWtwPYL1izrXftjW+johIHKEvvExqgT9SJUU3aWOMBU1Vq3UwaYZm5o5mF P2sNUWKAOycuTVXVxAqNyrEyCxM7HeTWr7E5kOYSw3W3gHo7FOGdFIcP8PyVISBs J2eG4EMkoYGfKrzYzjo3lYq2o02j+qQoE6ADmGsfVPxrDOfkLKHgD8vDE3qcjl9W mkR+ZCLN1ZJH7OUMHUhudaCHlQ9HTxEqZDDx6IB02xXXVU8Qtzo8Wbtvr0A1f35P yBzpcPeyGytr5ZaiRzYXv+wDlMQ1Otahv1PwlkNCOUvN0KIyLB55ooo+g8969dd4 VGOw6oQZMzPpYOvl8iz8qEUhGYtrmQ4Xq3EB86gkYelYe6bK/i6vQ4TQWJGysIrZ YCdz5CVn7FdZbjJwL9QyCVHx5SXDUwsbcLlVLeS83Xl4rNdWq6eLpYOnWXb2mp5L UgtoppbEfVXL5I3Cd3Syia9YltduLkAjTwRJt5LeS0BN7esNw2QpN6qK1k2QDct8 8LDxpsi9z+R/ug== =X4G8 -----END PGP SIGNATURE-----
