On Sun, 1 Apr 2018, Ola Lundqvist wrote:
The two CVEs are still reported as unfixed however. I just checked a minute
Please check by running the triage script yourself to see it.
y/security-tracker$ bin/lts-cve-triage.py --skip-dla-needed --exclude undetermined|grep mosquitto
So on my side everything seems to be fine!?