Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 42 FEDORA-2025-f1ea97edd8 critical: mosquitto CVE-2023-28366 update

fedora
Calendar Grey March 18, 2025
Dist Fedora Esm H88
Upgrade to Fedora 42 mosquitto release 2.0.21 tackling security vulnerabilities for CVE-2023-28366. Crucial for all users.
Update to 2.0.21, further fixes for CVE-2023-28366

Summary

Mosquitto is an open source message broker that implements the MQ Telemetry

Transport protocol version v5 and 3.1.x. MQTT provides a lightweight method

of carrying out messaging using a publish/subscribe model. This makes it

suitable for "machine to machine" messaging such as with low power sensors

or mobile devices such as phones, embedded computers or micro-controllers

like the Arduino.

Update Information:

Update to 2.0.21, further fixes for CVE-2023-28366

Topics%20covered

Topics Covered

security advisory fedora update CVE fixes mosquitto message broker

Change Log

* Thu Mar 6 2025 Peter Robinson - 2.0.21-1 - Update to 2.0.21 * Thu Feb 13 2025 Fabian Affolter - 2.0.20-5 - Only add openssl-devel-engine for Fedora

References

Fedora Update Notification FEDORA-2025-f1ea97edd8 2025-03-18 00:15:21.924540+00:00 Name : mosquitto Product : Fedora 42 Version : 2.0.21 Release : 1.fc42 URL : https://mosquitto.org/ Summary : Open Source MQTT v5/v3.1.x Broker Description : Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version v5 and 3.1.x. MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power sensors or mobile devices such as phones, embedded computers or micro-controllers like the Arduino.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f1ea97edd8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mosquitto
Product: Fedora 42
Version: 2.0.21
Release: 1.fc42
URL: https://mosquitto.org/
Summary: Open Source MQTT v5/v3.1.x Broker

Topics%20covered

Topics Covered

security advisory fedora update CVE fixes mosquitto message broker

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here