[Git][security-tracker-team/security-tracker][master] Reference upstream blog entry for CVE-2019-1177{8,9}/mosquitto

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
26f493ec by Salvatore Bonaccorso at 2019-11-16T22:51:39Z
Reference upstream blog entry for CVE-2019-1177{8,9}/mosquitto

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24096,6 +24096,7 @@ CVE-2019-11779 (In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQ
 	NOTE: Introduced by: https://github.com/eclipse/mosquitto/commit/883af8af5379092097c6552a7a4a8c52409d2566 (v1.5)
 	NOTE: Fixed by: https://github.com/eclipse/mosquitto/commit/106675093177335b18521bc0e5ad1d95343ad652 (1.6.6)
 	NOTE: Fixed by: https://github.com/eclipse/mosquitto/commit/84681d9728ceb7f6ea2b6751b4d87200d8a62f14 (1.5.9)
+	NOTE: https://mosquitto.org/blog/2019/09/version-1-6-6-released/
 CVE-2019-11778 (If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1 ...)
 	- mosquitto 1.6.6-1
 	[buster] - mosquitto <not-affected> (Session expiry interval support introduced in 1.6)
@@ -24105,6 +24106,7 @@ CVE-2019-11778 (If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.
 	NOTE: https://github.com/eclipse/mosquitto/issues/1401
 	NOTE: https://github.com/eclipse/mosquitto/commit/8407c6d146d1e8299127737d9735afc782e04ea8
 	NOTE: https://github.com/eclipse/mosquitto/commit/6f3e7b9ceb43e2626a32340c26b69ac8ae5e9c8c
+	NOTE: https://mosquitto.org/blog/2019/09/version-1-6-6-released/
 CVE-2019-11777 (In the Eclipse Paho Java client library version 1.2.0, when connecting ...)
 	NOT-FOR-US: Eclipse Paho Java client
 CVE-2019-11776 (In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflecte ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/26f493ec11235e6a83c96a5f7367dfe157d732d7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/26f493ec11235e6a83c96a5f7367dfe157d732d7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191116/aa614228/attachment.html>