Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Ubuntu 18.10, 18.04 LTS, 16.04 LTS: USN-4023-1 Security Advisory

ubuntu
Calendar Grey June 20, 2019
Dist Ubuntu Esm H88
Critical vulnerabilities in Mosquitto have been addressed with a swift patch for various Ubuntu versions. Secure your environments immediately.
Several security issues were fixed in Mosquitto.

Summary

Several security issues were fixed in Mosquitto.

Software Description:

- mosquitto: MQTT version 3.1/3.1.1 compatible message broker

Details:

It was discovered that Mosquitto broker incorrectly handled certain specially

crafted input and network packets. A remote attacker could use this to cause a

denial of service.

Topics%20covered

Topics Covered

security advisory denial of service security issue ubuntu mosquitto

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libmosquitto1                   1.4.15-2ubuntu0.18.10.3
  libmosquittopp1                 1.4.15-2ubuntu0.18.10.3
  mosquitto                       1.4.15-2ubuntu0.18.10.3
  mosquitto-clients               1.4.15-2ubuntu0.18.10.3

Ubuntu 18.04 LTS:
  libmosquitto1                   1.4.15-2ubuntu0.18.04.3
  libmosquittopp1                 1.4.15-2ubuntu0.18.04.3
  mosquitto                       1.4.15-2ubuntu0.18.04.3
  mosquitto-clients               1.4.15-2ubuntu0.18.04.3

Ubuntu 16.04 LTS:
  libmosquitto1                   1.4.8-1ubuntu0.16.04.7
  libmosquittopp1                 1.4.8-1ubuntu0.16.04.7
  mosquitto                       1.4.8-1ubuntu0.16.04.7
  mosquitto-clients               1.4.8-1ubuntu0.16.04.7

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4023-1

CVE-2017-7653, CVE-2017-7654

Severity
critical
Lowest
Low
Medium
High
Critical

June 20, 2019

Topics%20covered

Topics Covered

security advisory denial of service security issue ubuntu mosquitto

Package Information

https://launchpad.net/ubuntu/+source/mosquitto/1.4.15-2ubuntu0.18.10.3
https://launchpad.net/ubuntu/+source/mosquitto/1.4.15-2ubuntu0.18.04.3
https://launchpad.net/ubuntu/+source/mosquitto/1.4.8-1ubuntu0.16.04.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.