FEDORA-2025-89758d1b13 — security update for mqttcli

stable

mqttcli-0.2.8-1.fc43

FEDORA-2025-89758d1b13 created by linkdupont 9 months ago for Fedora 43

Update to 0.2.8

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-89758d1b13

This update has been submitted for testing by linkdupont.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been pushed to testing.

9 months ago

geraldosimiao provided feedback 9 months ago

karma

This update can be pushed to stable now if the maintainer wishes

9 months ago

This update has been submitted for stable by linkdupont.

9 months ago

This update has been pushed to stable.

9 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

9 months ago

approved

9 months ago

Builds

mqttcli-0.2.8-1.fc43

BZ#2408328 CVE-2025-58189 mqttcli: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]

BZ#2409801 CVE-2025-61723 mqttcli: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43]

BZ#2410751 CVE-2025-58185 mqttcli: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]

BZ#2411647 CVE-2025-58188 mqttcli: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

BZ#2423010 CVE-2025-10543 mqttcli: paho.mqtt.golang: Integer Overflow in UTF-8 String Encoding [fedora-43]

BZ#2423020 CVE-2025-10543 mqttcli: paho.mqtt.golang: Integer Overflow in UTF-8 String Encoding [fedora-43]

mqttcli-0.2.8-1.fc43

Automated Test Results

ignored