CVE-2018-12546

In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Alpine Linux ALPINE-CVE-2018-12546 mosquitto 修正版: 1.5.6-r0
Debian DEBIAN-CVE-2018-12546 mosquitto 修正版: 1.5.6-1

参照URL

report bugs.eclipse.org