-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 22 Dec 2017 08:19:25 +0000
Source: mosquitto
Binary: mosquitto mosquitto-dev libmosquitto1 libmosquitto-dev libmosquittopp1 libmosquittopp-dev mosquitto-clients mosquitto-dbg libmosquitto1-dbg libmosquittopp1-dbg
Architecture: source amd64 all
Version: 1.4.10-3+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Roger A. Light <roger@atchoo.org>
Changed-By: Roger A. Light <roger@atchoo.org>
Description:
libmosquitto-dev - MQTT version 3.1/3.1.1 client library, development files
libmosquitto1 - MQTT version 3.1/3.1.1 client library
libmosquitto1-dbg - debugging symbols for libmosquitto binaries
libmosquittopp-dev - MQTT version 3.1 client C++ library, development files
libmosquittopp1 - MQTT version 3.1/3.1.1 client C++ library
libmosquittopp1-dbg - debugging symbols for libmosquittopp binaries
mosquitto - MQTT version 3.1/3.1.1 compatible message broker
mosquitto-clients - Mosquitto command line MQTT clients
mosquitto-dbg - debugging symbols for mosquitto binaries
mosquitto-dev - Development files for Mosquitto
Changes:
mosquitto (1.4.10-3+deb9u1) stretch; urgency=medium
.
* SECURITY UPDATE: Mosquitto persistence file is world readable.
- debian/patches/mosquitto-1.4.x_cve-2017-9868.patch: Set umask to limit
read permissions.
- CVE-2017-9868
Checksums-Sha1:
e1a1b266f0b8d2d5e2d533fa21eda7d5b98431f1 2511 mosquitto_1.4.10-3+deb9u1.dsc
010297dce87335488a1030733084920ef90851d5 26464 mosquitto_1.4.10-3+deb9u1.debian.tar.xz
0a720caf84f5c6b2e8cdeb4e4f7d6e3e8543b131 41142 libmosquitto-dev_1.4.10-3+deb9u1_amd64.deb
c17c43644acff5cd005c40db21570fa819d5facf 104538 libmosquitto1-dbg_1.4.10-3+deb9u1_amd64.deb
e583133481414c9633bcc39b6e3970225f2d6d4c 52046 libmosquitto1_1.4.10-3+deb9u1_amd64.deb
ac5547e4c52a759e179b9af29e520afa0e843193 29266 libmosquittopp-dev_1.4.10-3+deb9u1_amd64.deb
32aaa3361c922feea6350a16f66e04037f8a01c2 39788 libmosquittopp1-dbg_1.4.10-3+deb9u1_amd64.deb
d9c6d4ae6c2d0533d90ca8cb20db7fbae765b726 33122 libmosquittopp1_1.4.10-3+deb9u1_amd64.deb
357fa3758643275a1af04fc5d9b1a4afee03aee2 53340 mosquitto-clients_1.4.10-3+deb9u1_amd64.deb
6861841aefd03d1368ba31ad58afb1c138230031 309134 mosquitto-dbg_1.4.10-3+deb9u1_amd64.deb
35f7532f406cbf0ce99b42d65e237263fcaca20a 29878 mosquitto-dev_1.4.10-3+deb9u1_all.deb
007b988cc694a0e23ba892fdfeeea912ab5ee832 9363 mosquitto_1.4.10-3+deb9u1_amd64.buildinfo
a74fa1a18dc55c212dbfd92402549f0a40339fec 130930 mosquitto_1.4.10-3+deb9u1_amd64.deb
Checksums-Sha256:
10edc6e80e50d7152f0e2e2a6073eff6c85ca3cd9706a03bb54eeed0ae5643e6 2511 mosquitto_1.4.10-3+deb9u1.dsc
3b54ec510d6659bf7aac7bb2fbc0f5baef9162e851abd5af13dca328841c727f 26464 mosquitto_1.4.10-3+deb9u1.debian.tar.xz
a2012961b12e463f3c2242e04fe0a5b4af2fc4cc429ba1bfc43811252444cd71 41142 libmosquitto-dev_1.4.10-3+deb9u1_amd64.deb
ced2b51054baacefb9ec3fe6bd1f7a64ff01fd34361841bd4b374041b2f4fa10 104538 libmosquitto1-dbg_1.4.10-3+deb9u1_amd64.deb
4915a652214640e3291b0eb712a86fba2642eb946e1c2f07ac527f21e7a63674 52046 libmosquitto1_1.4.10-3+deb9u1_amd64.deb
144bcb314e6227f6a0d1334279afd7841b92eb2a9fb7d676cba235668791945d 29266 libmosquittopp-dev_1.4.10-3+deb9u1_amd64.deb
37352cf217f3d28ddc0edcfa7f6421afd74dbddef5db14946bc4a831049d66c2 39788 libmosquittopp1-dbg_1.4.10-3+deb9u1_amd64.deb
4efe8c0b3b37947f76da9b46a7fbd072eaaaffd8ed15c7ecb71b5269f62820b2 33122 libmosquittopp1_1.4.10-3+deb9u1_amd64.deb
42ca67b9be8e7efe136bdebfaa79b4a270391c95fc49e3d4cad6885153992e24 53340 mosquitto-clients_1.4.10-3+deb9u1_amd64.deb
2e12fb7502fcf6f51de04aa4328aaee73f5396632b71c49e8cd95a0b7867ddda 309134 mosquitto-dbg_1.4.10-3+deb9u1_amd64.deb
bef7bab738acc3f7e41cd57aad46c47b29a1b77ca15fe088725cdd974facaa0f 29878 mosquitto-dev_1.4.10-3+deb9u1_all.deb
da64f399e24de0461206933f164d79e74ad1c1d47847fdfadc410c913b636cd5 9363 mosquitto_1.4.10-3+deb9u1_amd64.buildinfo
087a59b2514568f65b0399a84ce417c6cfc70e6b815baca68e137a1182c83a6c 130930 mosquitto_1.4.10-3+deb9u1_amd64.deb
Files:
638e7768f0c758560a35bbbd2b00f49b 2511 net optional mosquitto_1.4.10-3+deb9u1.dsc
6edfb4b9aa27cd148e63f01b03676454 26464 net optional mosquitto_1.4.10-3+deb9u1.debian.tar.xz
3aad000b3066bc96e7e24a2e96d370fc 41142 libdevel optional libmosquitto-dev_1.4.10-3+deb9u1_amd64.deb
352e86cbf58d5cd5b98183bf3892c1ba 104538 debug extra libmosquitto1-dbg_1.4.10-3+deb9u1_amd64.deb
0804389214b2e5ec8fb2652fd876f6c8 52046 libs optional libmosquitto1_1.4.10-3+deb9u1_amd64.deb
54a5c821467994e15bea39ab4e3e2615 29266 libdevel optional libmosquittopp-dev_1.4.10-3+deb9u1_amd64.deb
a3e93d09635f1054af6d74ce8439ceb2 39788 debug extra libmosquittopp1-dbg_1.4.10-3+deb9u1_amd64.deb
0d8ce8d18c612840453ddc0d5affc170 33122 libs optional libmosquittopp1_1.4.10-3+deb9u1_amd64.deb
bd5f375b649f9768f53c38d7edecf71f 53340 net optional mosquitto-clients_1.4.10-3+deb9u1_amd64.deb
990ceaeb624e292b62b36bfadafd965b 309134 debug extra mosquitto-dbg_1.4.10-3+deb9u1_amd64.deb
2fc4b06e03b0911d37819928d6271388 29878 devel optional mosquitto-dev_1.4.10-3+deb9u1_all.deb
493e067b33df7eaf00bae97094593963 9363 net optional mosquitto_1.4.10-3+deb9u1_amd64.buildinfo
25fdea38770754e6320bf64c5f0f8a49 130930 net optional mosquitto_1.4.10-3+deb9u1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIcBAEBCAAGBQJahIUDAAoJEPNPCXROn13Z92wQAK4T57a05qZSx4LOKuaB8Om7
/MQyXvKO9ezaKyFwxKq81DqDfpkfz3YGlYudfiY0vkrTVwxmvfthCbblOeINF4oB
rfhJ4om1jKyqoLpROsoh8koQogXFo2gquEk95L2G2SOTHZb5/GvhfXF5lg6LHnzI
kwTVtFSPPvHfkVdE3x1SVBbz+hKwfm4UKjxj/s4QYzRW2mKvOTIY/Ch02CFYKnde
Z1lLWlebO77mAKqeBtROTH5S7uBnb4zwvbm8Z7lOkarJ0sK00ONsU62WIiCfF7QD
Gh7aNmn5J//8ES3QTKuaPxzuOdAcWK48rcgKHsH6Ut1wPszln3t9oYe55lIfK2gb
AxCWHOYu1WPB1rXcwC9l7hd8FDPDOhmJULlrlKf1imvXlslMpPTd1JQwdkPkdzBz
XDAibO0PLFYBwki1+HwfPcg+jY81NF8DcoLHmvC0tIL9z6P6AQN1+K4Se7RMQh5V
I9YVsTGo7BZnNqlHzZjVa06zbh+AwOKaqGw94G6xz+JAWMXq6Waz31gtGIGCh98q
obsFiw30FKBU9Rsg715kIKwk6YUsVplUttT/Kig1RWn1RKUNDMihK2Ny7xz8Xqbx
2tknKi2khpj0K2HyETJL9XKJGilBKufNCbgE5ckbgI1XXVL1B9UyTEfUy1EHQ/EQ
sfW70udRxyLY7mCF1vt0
=Jqcz
-----END PGP SIGNATURE-----
