openSUSE-SU-2019:0233-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:0233-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2019:0233-1
- Related
- Published
- 2019-03-23T11:06:23Z
- Modified
- 2019-03-23T11:06:23Z
- Summary
- Security update for mosquitto
- Details
-
This update for mosquitto fixes the following issues:
Security issues fixed:
- CVE-2018-12546: Fixed an issue with revoked access to topics (bsc#1125019).
- CVE-2018-12551: Fixed an issue which allowed malformed data in the password file to be treated as valid (bsc#1125020).
- CVE-2018-12550: Fixed an an issue which treats an empty ACL file wrongly (bsc#1125021).
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SRF6WPNSL7W2K6AHOK3GYIPB4F2ISYFN/#SRF6WPNSL7W2K6AHOK3GYIPB4F2ISYFN
- https://bugzilla.suse.com/1125019
- https://bugzilla.suse.com/1125020
- https://bugzilla.suse.com/1125021
- https://www.suse.com/security/cve/CVE-2018-12546
- https://www.suse.com/security/cve/CVE-2018-12550
- https://www.suse.com/security/cve/CVE-2018-12551