Hi Ola,
On Sun, 1 Apr 2018, Ola Lundqvist wrote:
The two CVEs are still reported as unfixed however. I just checked a minute
ago.
Please check by running the triage script yourself to see it.
I did:
debian@devel:~/debian-security/security-tracker$ bin/lts-cve-triage.py --skip-dla-needed --exclude undetermined|grep mosquitto
debian@devel:~/debian-security/security-tracker$
So on my side everything seems to be fine!?
Thorsten