Stay Secure with the Latest Linux Advisories

security advisoryupdatecritical security

Mageia 8: 2021-0445 Critical: Mosquitto Subscription Issue Fix

Mosquitto is updated to 2.0.12 to fix security vulnerability: In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for . MGASA-2021-0445 - Updated mosquitto packages fix security vulnerability Publication date: 29 Sep 2021 URL: https://advisories.mageia.org/MGASA-2021-0445.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-34434 Mosquitto is updated to 2.0.12 to fix security vulnerability: In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked (CVE-2021-34434). References: - https://bugs.mageia.org/show_bug.cgi?id=29454 - https://mosquitto.org/blog/2021/08/version-2-0-12-released/ - https://www.cve.org/CVERecord?id=CVE-2021-34434 SRPMS: - 8/core/mosquitto-2.0.12-1.mga8 . Mosquitto revisions address urgent vulnerabilities impacting earlier iterations. Uncover recent updates and guidance.. Mosquitto Security,Mageia Update,Eclipse Mosquitto Advisory. . Severity: Critical. LinuxSecurity.com Team

Sep 29, 2021 •Critical Mageia