Publishing details
Changelog
bluez (5.37-0ubuntu5.3) xenial-security; urgency=medium
* SECURITY UPDATE: buffer overflow in parse_line function
- debian/patches/CVE-2016-7837.patch: make sure we don't write past the
end of the array in tools/csr.c.
- CVE-2016-7837
* SECURITY UPDATE: privilege escalation via improper access control
- debian/patches/CVE-2020-0556-pre1.patch: use .accept and .disconnect
instead of attio in profiles/input/hog.c, src/device.c, src/device.h.
- debian/patches/CVE-2020-0556-1.patch: HOGP must only accept data from
bonded devices in profiles/input/hog.c.
- debian/patches/CVE-2020-0556-2.patch: HID accepts bonded device
connections only in profiles/input/device.c, profiles/input/device.h,
profiles/input/input.conf, profiles/input/manager.c.
- debian/patches/CVE-2020-0556-3.patch: attempt to set security level
if not bonded in profiles/input/hog.c.
- debian/patches/CVE-2020-0556-4.patch: add LEAutoSecurity setting to
input.conf in profiles/input/device.h, profiles/input/hog.c,
profiles/input/input.conf, profiles/input/manager.c.
- CVE-2020-0556
-- Marc Deslauriers <email address hidden> Mon, 23 Mar 2020 08:39:08 -0400
Builds
Built packages
-
bluetooth
Bluetooth support
-
bluez
Bluetooth tools and daemons
-
bluez-cups
Bluetooth printer driver for CUPS
-
bluez-cups-dbgsym
debug symbols for package bluez-cups
-
bluez-dbg
Bluetooth tools and daemons (with debugging symbols)
-
bluez-dbgsym
debug symbols for package bluez
-
bluez-hcidump
Analyses Bluetooth HCI packets
-
bluez-hcidump-dbgsym
debug symbols for package bluez-hcidump
-
bluez-obexd
bluez obex daemon
-
bluez-obexd-dbgsym
debug symbols for package bluez-obexd
-
bluez-tests
BlueZ test tools and scripts
-
bluez-tests-dbgsym
debug symbols for package bluez-tests
-
libbluetooth-dev
Development files for using the BlueZ Linux Bluetooth library
-
libbluetooth-dev-dbgsym
debug symbols for package libbluetooth-dev
-
libbluetooth3
Library to use the BlueZ Linux Bluetooth stack
-
libbluetooth3-dbg
Library to use the BlueZ Linux Bluetooth stack with debugging symbols
-
libbluetooth3-dbgsym
debug symbols for package libbluetooth3
Package files