Your message dated Mon, 29 May 2017 15:20:08 +0000
with message-id <[email protected]>
and subject line Bug#857759: fixed in mosquitto 1.4.10-3
has caused the Debian Bug report #857759,
regarding libmosquitto1 does not support connecting to IPv6 hosts with TLS
enabled
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
857759: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857759
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libmosquitto1
Version: 1.3.4-2
Severity: important
Dear Maintainer,
This is a known issue that was fixed upstream. Please consider backporting
https://github.com/eclipse/mosquitto/commit/98ea68490626b1d18aee2004b411294c85e62212
-- System Information:
Debian Release: 8.7
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=locale: Cannot set
LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libmosquitto1 depends on:
ii libc-ares2 1.10.0-2+deb8u1
ii libc6 2.19-18+deb8u7
ii libssl1.0.0 1.0.1t-1+deb8u6
libmosquitto1 recommends no packages.
libmosquitto1 suggests no packages.
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: mosquitto
Source-Version: 1.4.10-3
We believe that the bug you reported is fixed in the latest version of
mosquitto, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Roger A. Light <[email protected]> (supplier of updated mosquitto package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 29 May 2017 13:43:29 +0100
Source: mosquitto
Binary: mosquitto mosquitto-dev libmosquitto1 libmosquitto-dev libmosquittopp1
libmosquittopp-dev mosquitto-clients mosquitto-dbg libmosquitto1-dbg
libmosquittopp1-dbg
Architecture: source
Version: 1.4.10-3
Distribution: unstable
Urgency: high
Maintainer: Roger A. Light <[email protected]>
Changed-By: Roger A. Light <[email protected]>
Description:
libmosquitto-dev - MQTT version 3.1/3.1.1 client library, development files
libmosquitto1 - MQTT version 3.1/3.1.1 client library
libmosquitto1-dbg - debugging symbols for libmosquitto binaries
libmosquittopp-dev - MQTT version 3.1 client C++ library, development files
libmosquittopp1 - MQTT version 3.1/3.1.1 client C++ library
libmosquittopp1-dbg - debugging symbols for libmosquittopp binaries
mosquitto - MQTT version 3.1/3.1.1 compatible message broker
mosquitto-clients - Mosquitto command line MQTT clients
mosquitto-dbg - debugging symbols for mosquitto binaries
mosquitto-dev - Development files for Mosquitto
Closes: 857759
Changes:
mosquitto (1.4.10-3) unstable; urgency=high
.
* SECURITY UPDATE: Pattern ACL can be bypassed by using a username/client id
set to '+' or '#'.
- debian/patches/mosquitto-0.15_cve-2017-7650.patch: Reject send/receive
of messages to/from clients with a '+', '#' or '/' in their
username/client id.
- CVE-2017-7650
* New patch debian/patches/allow_ipv6_bridges.patch allows bridges to make
IPv6 connections when using TLS (closes: #857759).
Checksums-Sha1:
1a9abe0d479db354ab29561b8e076f0b14fc6068 2501 mosquitto_1.4.10-3.dsc
4f96df25e45db50d69106afebfa0078d9013babe 26368 mosquitto_1.4.10-3.debian.tar.xz
Checksums-Sha256:
6de637381d0e320ad94f7effd983b461a174f04ce2931638ab7689d0ff23e85f 2501
mosquitto_1.4.10-3.dsc
ecba2179b98e1956928a9d4da493bf7e23f7d83831b6940e22f27c812e0e8245 26368
mosquitto_1.4.10-3.debian.tar.xz
Files:
1e384b419b05d116feb99671caeaaa8e 2501 net optional mosquitto_1.4.10-3.dsc
dc6af7bc271e18eb75d7c0f53d16d369 26368 net optional
mosquitto_1.4.10-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=7O3t
-----END PGP SIGNATURE-----
--- End Message ---
