Ubuntu
mosquitto package

mosquitto 1.4.15-2ubuntu0.18.04.3 source package in Ubuntu

Changelog

mosquitto (1.4.15-2ubuntu0.18.04.3) bionic-security; urgency=medium

  * SECURITY UPDATE: DoS (client disconnect) via invalid UTF-8 strings
    - debian/patches/add-validate-utf8.patch: Add validate UTF-8
    - debian/patches/CVE-2017-7653.patch: Add UTF-8 tests, plus some validation
      fixes
    - CVE-2017-7653
  * SECURITY UPDATE: Memory leak in the Mosquitto Broker allows unauthenticated
    clients to send crafted CONNECT packets which could cause DoS
    - debian/patches/CVE-2017-7654.patch: Fix memory leak that could be caused
      by a malicious CONNECT packet
    - CVE-2017-7654

 -- Eduardo Barretto <email address hidden>  Tue, 18 Jun 2019 11:42:22 -0300

Upload details

Uploaded by:
Eduardo Barretto
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe net
Bionic security universe net

Downloads

File Size SHA-256 Checksum
mosquitto_1.4.15.orig.tar.gz 360.3 KiB 7d3b3e245a3b4ec94b05678c8199c806359737949f4cfe0bf936184f6ca89a83
mosquitto_1.4.15-2ubuntu0.18.04.3.debian.tar.xz 34.6 KiB fb06a211d0e7bfef784f3f6d636f87345da19650e43d3079052ed3ac1cf3d863
mosquitto_1.4.15-2ubuntu0.18.04.3.dsc 2.6 KiB f5ea5f8999388b5a3983278c8909ef1a9b8eb85eba045e0ec03f535a1e593f03

View changes file

Binary packages built by this source

libmosquitto-dev: MQTT version 3.1/3.1.1 client library, development files

 This is the header and man page for the libmosquitto1 C library, which is a
 library for implementing MQTT version 3.1/3.1.1 clients. This package is
 needed to do development with libmosquitto1.

libmosquitto1: MQTT version 3.1/3.1.1 client library

 This is a C library for implementing MQTT version 3.1/3.1.1 clients.
 .
 MQTT provides a method of carrying out messaging using a publish/subscribe
 model. It is lightweight, both in terms of bandwidth usage and ease of
 implementation. This makes it particularly useful at the edge of the network
 where a sensor or other simple device may be implemented using an arduino for
 example.

libmosquitto1-dbg: debugging symbols for libmosquitto binaries

 This package contains debugging files used to investigate problems with
 the binaries provided by the libmosquitto1 package.

libmosquittopp-dev: MQTT version 3.1 client C++ library, development files

 This is the header and man page for the libmosquittopp1 C++ library, which is
 a library for implementing MQTT version 3.1 clients. This package is needed to
 do development with libmosquittopp1.

libmosquittopp1: MQTT version 3.1/3.1.1 client C++ library

 This is a C++ library for implementing MQTT version 3.1/3.1.1 clients.
 .
 MQTT provides a method of carrying out messaging using a publish/subscribe
 model. It is lightweight, both in terms of bandwidth usage and ease of
 implementation. This makes it particularly useful at the edge of the network
 where a sensor or other simple device may be implemented using an arduino for
 example.

libmosquittopp1-dbg: debugging symbols for libmosquittopp binaries

 This package contains debugging files used to investigate problems with
 the binaries provided by the libmosquittopp1 package.

mosquitto: MQTT version 3.1/3.1.1 compatible message broker

 This is a message broker that supports version 3.1 and 3.1.1 of the MQTT
 protocol.
 .
 MQTT provides a method of carrying out messaging using a publish/subscribe
 model. It is lightweight, both in terms of bandwidth usage and ease of
 implementation. This makes it particularly useful at the edge of the network
 where a sensor or other simple device may be implemented using an arduino for
 example.

mosquitto-clients: Mosquitto command line MQTT clients

 This is two MQTT version 3.1/3.1.1 command line clients. mosquitto_pub can be
 used to publish messages to a broker and mosquitto_sub can be used to
 subscribe to a topic to receive messages.
 .
 MQTT provides a method of carrying out messaging using a publish/subscribe
 model. It is lightweight, both in terms of bandwidth usage and ease of
 implementation. This makes it particularly useful at the edge of the network
 where a sensor or other simple device may be implemented using an arduino for
 example.

mosquitto-dbg: debugging symbols for mosquitto binaries

 This package contains debugging files used to investigate problems with
 the binaries provided by the packages mosquitto, mosquitto-clients,
 libmosquitto1 and libmosquittopp1.

mosquitto-dev: Development files for Mosquitto

 Mosquitto is a message broker that supports the MQTT protocol.
 .
 This package contains the include files used if you wish to compile a package
 which requires Mosquitto's source file headers.