bugtraq - [SECURITY] [DSA 4388-2] mosquitto regression update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 17 Feb 2019 20:59:58 +0000
From: Salvatore Bonaccorso <carnil@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4388-2] mosquitto regression update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4388-2                   security@...ian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
February 17, 2019                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mosquitto
Debian Bug     : 922071

Kushal Kumaran reported that the update for mosquitto issued as DSA
4388-1 causes mosquitto to crash when reloading the persistent database.
Updated packages are now available to correct this issue.

For the stable distribution (stretch), this problem has been fixed in
version 1.4.10-3+deb9u4.

We recommend that you upgrade your mosquitto packages.

For the detailed security status of mosquitto please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/mosquitto

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlxpyjFfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0TGjw/+Jf5JsOqqDFBXo68SLiaMfZ+u0bdM1VFGHtGbr4houBwpW6UTFRKZt+8G
ClRxDmjoXVM8+LTOtA0KgnL5udKC8duxFGeg6s6Q3gIyIEPWo4GPle0i3PON4L7/
JvlppclsZuzkrn4/R3sQjcnjereLoQUfPIY0XxBQoQGWXI0oJxRb/GQO9PI0JtvI
P3gMv0Lf6D1trDUB7sEmzHBp91Vyd4U/pRZEGhd6L9/JawAeNMWOHOM931JOPhPs
pUAdnnl0WEX3xYKOI/QaMlxinp7tYoQqcunCBai+VdCZM+3XNXLJef7BxDx2qKCz
DAg4UtaEAkLRQ/r3xmVTAeQHBsDJyaWx1nshHqnasokzd/XCyTOTk3icsjTuUq5p
1q/lIjiAm0vfFKmE5LSdLpBFu//jei+9BtCuKr/uXtWRLJP3EjmopW3a1VtYtW5+
3crtDuG6Y5JTBF7jSctPS6BO7TcJq3rV52W7Vh8un7iY9r/riaVwtzAhbN2SEX+r
ZATcSk0tipUmi0soXfnn/SPr7fWBoiHO1bJ9tK2OtQmccZNAzjsIf1Fj4ofOo8vk
jWtkJlPZaa/2oEfq7KcoylDP4vJBb8Rcq3yG0WHb+lLp0LQQm53kknP9dt5UyYKd
XJnj6dNT8TDtagyns0L+pzMML92+quNWbJ6KXveGfn18ULNskzI=
=uSDG
-----END PGP SIGNATURE-----