Information on source package mosquitto

Available versions

ReleaseVersion
jessie1.3.4-2+deb8u1
jessie (security)1.3.4-2+deb8u3
stretch (security)1.4.10-3+deb9u4
buster1.5.7-1
bullseye1.6.7-1
sid1.6.7-1

Open issues

BugjessiestretchbusterbullseyesidDescription
CVE-2019-11779vulnerablevulnerablevulnerablefixedfixedIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT cli ...
CVE-2019-11778vulnerablevulnerablevulnerablefixedfixedIf an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1 ...
CVE-2018-12551vulnerable (no DSA, postponed)fixedfixedfixedfixedWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured ...
CVE-2018-12550vulnerable (no DSA, postponed)fixedfixedfixedfixedWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured ...
CVE-2018-12546vulnerable (no DSA, ignored)fixedfixedfixedfixedIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client pu ...
CVE-2017-7655vulnerable (no DSA, postponed)vulnerable (no DSA)fixedfixedfixedIn Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vu ...

Resolved issues

BugDescription
CVE-2018-20145Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option ...
CVE-2018-12543In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is ...
CVE-2017-9868In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) i ...
CVE-2017-7654In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability w ...
CVE-2017-7653The Eclipse Mosquitto broker up to version 1.4.15 does not reject stri ...
CVE-2017-7652In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running wi ...
CVE-2017-7651In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server ...
CVE-2017-7650In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clie ...

Security announcements

DSA / DLADescription
DSA-4388-2mosquitto - regression update
DSA-4388-1mosquitto - security update
DSA-4325-1mosquitto - security update
DLA-1525-1mosquitto - security update
DLA-1409-1mosquitto - security update
DLA-1334-1mosquitto - security update
DLA-1146-1mosquitto - security update
DSA-3865-1mosquitto - security update
DLA-961-1mosquitto - security update

Search for package or bug name: Reporting problems