Bug 25902 - mosquitto new security issue(s) fixed upstream in 1.6.2
Summary: mosquitto new security issue(s) fixed upstream in 1.6.2
Status: RESOLVED DUPLICATE of bug 25728
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: David GEIGER
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-12-19 18:16 CET by David Walser
Modified: 2019-12-21 02:24 CET (History)
0 users

See Also:
Source RPM: mosquitto-1.6.0-1.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-12-19 18:16:35 CET 
Fedora has issued an advisory on May 11:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2BTXFZTM5ZLXR6W3GRIYELKTHAYEFBGT/

I recommend updating to the latest, as well as updating periodically, as this software seems to have a lot of security issues.
Comment 1 David GEIGER 2019-12-20 22:54:16 CET 
Done for mga7 updating to latest 1.6.8 release!
Comment 2 David Walser 2019-12-21 02:24:37 CET 
Thanks David.  Sophie is outdated and somehow I missed that we updated to 1.6.6 already for another security issue.  I'll close this bug and open a new one for the 1.6.8 update.

*** This bug has been marked as a duplicate of bug 25728 ***

Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.