Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-12546 →
DEBIAN-CVE-2018-12546
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
mosquitto
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-1"}]}]
Debian:13
mosquitto
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-1"}]}]
Debian:14
mosquitto
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-1"}]}]
Références
- advisory security-tracker.debian.org