Accepted mosquitto 0.15-2+deb7u2 (source amd64 all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 26 Jun 2017 09:31:02 +0100
Source: mosquitto
Binary: mosquitto libmosquitto0 libmosquitto0-dev libmosquittopp0 libmosquittopp0-dev mosquitto-clients python-mosquitto
Architecture: source amd64 all
Version: 0.15-2+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Roger A. Light <roger@atchoo.org>
Changed-By: Roger A. Light <roger@atchoo.org>
Description:
libmosquitto0 - MQTT version 3.1 client library
libmosquitto0-dev - MQTT version 3.1 client library, development files
libmosquittopp0 - MQTT version 3.1 client C++ library
libmosquittopp0-dev - MQTT version 3.1 client C++ library, development files
mosquitto - MQTT version 3.1 compatible message broker
mosquitto-clients - Mosquitto command line MQTT clients
python-mosquitto - MQTT version 3.1 client library, python bindings
Changes:
mosquitto (0.15-2+deb7u2) wheezy-security; urgency=high
.
* SECURITY UPDATE: Persistence file is world readable, which may expose
sensitive data.
- debian/patches/mosquitto-0.15_cve-2017-9868.patch: Set umask to
restrict persistence file read access to owner.
- CVE-2017-9868
Checksums-Sha1:
73485ad0e58046f13ab43af4145f9d766ecbd972 1937 mosquitto_0.15-2+deb7u2.dsc
710fab5a22800ec9277ad32b1bf480e13fdf85d9 8155 mosquitto_0.15-2+deb7u2.debian.tar.gz
7b6f6a069255f715325dff6e0df3423a26b97a1a 68688 mosquitto_0.15-2+deb7u2_amd64.deb
07c20d0d652b7980b6bcfa042f7c92a6bcde6971 25760 libmosquitto0_0.15-2+deb7u2_amd64.deb
4be3aba2890f97cc4ef66370ba2c537cc61cf889 20462 libmosquitto0-dev_0.15-2+deb7u2_all.deb
52514f3c9fea8b7cf50b2a31baeb24f923d47c7b 16210 libmosquittopp0_0.15-2+deb7u2_amd64.deb
c534eb1240da9aeac7227b2bc5dad7a66aa18738 12682 libmosquittopp0-dev_0.15-2+deb7u2_all.deb
86802f492e3c96bb5d101b59577b7c56caa9eeea 28606 mosquitto-clients_0.15-2+deb7u2_amd64.deb
9524318cf01213085ef6431e7a5c262efe98a669 17592 python-mosquitto_0.15-2+deb7u2_all.deb
Checksums-Sha256:
8df7371967b187bb72e97624b7904dd011331727daa18d46a65c961c032ced3f 1937 mosquitto_0.15-2+deb7u2.dsc
c88114b951083b18876471cad055f268a2a5cf5259f47de40a1b310a6605ff18 8155 mosquitto_0.15-2+deb7u2.debian.tar.gz
11ea940a484a97581e7cf282d5e75676b6f374b35f8ad8bfca862d46462a23e0 68688 mosquitto_0.15-2+deb7u2_amd64.deb
c52ae6c5f8e55e883fe2355b01037cb27521284745ddea9baf673a0942efa5d4 25760 libmosquitto0_0.15-2+deb7u2_amd64.deb
0127a4bc2d1b4bcfffdc017b4a41b25b74be7e345d0c954e3c5c8f01dfc295ce 20462 libmosquitto0-dev_0.15-2+deb7u2_all.deb
5c527aa86ffcfaa62de67575f1bbdd330d030db90c4c8979126a506bd21a89b6 16210 libmosquittopp0_0.15-2+deb7u2_amd64.deb
d68ed96a43a94e1e0d0424981e189d9c8a098aaecef0bd86cc47b252fac8d571 12682 libmosquittopp0-dev_0.15-2+deb7u2_all.deb
ade0634c8546abeffbf055c7dbb91fa34fcc8cde17148294734e8e929dcd9d20 28606 mosquitto-clients_0.15-2+deb7u2_amd64.deb
6162e0a6e783dadb90a61bffec6f7b14a2f10ac53bc2015e05003a4f97f6039b 17592 python-mosquitto_0.15-2+deb7u2_all.deb
Files:
10a13cc0f21c04401805c68b43044019 1937 net optional mosquitto_0.15-2+deb7u2.dsc
e16112c1032535361e29832de78a0ea7 8155 net optional mosquitto_0.15-2+deb7u2.debian.tar.gz
e0221a906bee5fc6d24b27a7af20b854 68688 net optional mosquitto_0.15-2+deb7u2_amd64.deb
5e2416ffe5d576c3f10aa1f36a33097a 25760 libs optional libmosquitto0_0.15-2+deb7u2_amd64.deb
d855b101d0c3d9d94c8f6d78b733d5f0 20462 libdevel optional libmosquitto0-dev_0.15-2+deb7u2_all.deb
0789f25f5622215f083543b2996e6e69 16210 libs optional libmosquittopp0_0.15-2+deb7u2_amd64.deb
d09af4b283e9f4684f4f7ef846e9a4fb 12682 libdevel optional libmosquittopp0-dev_0.15-2+deb7u2_all.deb
583b747c3fe9a4775a72dc5e059c8cdb 28606 net optional mosquitto-clients_0.15-2+deb7u2_amd64.deb
3cee46582dda4f4df129747b71e6322f 17592 python optional python-mosquitto_0.15-2+deb7u2_all.deb
-----BEGIN PGP SIGNATURE-----
Comment: Signed by Raphael Hertzog
iQEzBAEBCgAdFiEE1823g1EQnhJ1LsbSA4gdq+vCmrkFAlnyAxcACgkQA4gdq+vC
mrk4yQf/YbR/tXqsy6nea85hpklzcR793qZBS+xLz9EVPN09LaAc+7Q7TmdhqGlQ
tHVVtysek3Wm5TB5C9E8W5+NYtBsQEcaHrpsMuaVmodhWBXQKhgWmCMtgyMVuht2
jACnpnKy5rtSuBAEDYbEAPhGOsC/d+BgrXOFTpQTeIy+7WvCB9sVvcOSSqgdqtI3
56KC+yNfgZ4aWgcIUaFzvmfNJ5V9AvKY6S7qQF7oAGp5UMVgMUNuMGDaQO4ZQEmw
bZ9rHIQSn4iHgPX3q1BmHexkX0+IYGOT8qBRV2PkG07jkdHta6B7YN8IlHpMG1na
jXsBlR1RVpMcFZJ4B1MuXNbrjY1SmA==
=7pW9
-----END PGP SIGNATURE-----