Ubuntu
bluez package

bluez 5.50-0ubuntu5.1 source package in Ubuntu

Changelog

bluez (5.50-0ubuntu5.1) eoan-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via improper access control
    - debian/patches/CVE-2020-0556-1.patch: HOGP must only accept data from
      bonded devices in profiles/input/hog.c.
    - debian/patches/CVE-2020-0556-2.patch: HID accepts bonded device
      connections only in profiles/input/device.c, profiles/input/device.h,
      profiles/input/input.conf, profiles/input/manager.c.
    - debian/patches/CVE-2020-0556-3.patch: attempt to set security level
      if not bonded in profiles/input/hog.c.
    - debian/patches/CVE-2020-0556-4.patch: add LEAutoSecurity setting to
      input.conf in profiles/input/device.h, profiles/input/hog.c,
      profiles/input/input.conf, profiles/input/manager.c.
    - CVE-2020-0556

 -- Marc Deslauriers <email address hidden>  Mon, 23 Mar 2020 08:25:48 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Bluetooth
Architectures:
linux-any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
bluez_5.50.orig.tar.xz 1.7 MiB 5ffcaae18bbb6155f1591be8c24898dc12f062075a40b538b745bfd477481911
bluez_5.50-0ubuntu5.1.debian.tar.xz 43.0 KiB bc4e91594ca4877614188041f04587fadcf23401b9aa5787e4d1219d0ad9db60
bluez_5.50-0ubuntu5.1.dsc 2.8 KiB bf4af3e9facbe88b4846ec06ced186b4545ce62ee117dc92c0e48e3fec443f6e

View changes file

Binary packages built by this source

bluetooth: No summary available for bluetooth in ubuntu eoan.

No description available for bluetooth in ubuntu eoan.

bluez: No summary available for bluez in ubuntu eoan.

No description available for bluez in ubuntu eoan.

bluez-cups: No summary available for bluez-cups in ubuntu eoan.

No description available for bluez-cups in ubuntu eoan.

bluez-dbg: No summary available for bluez-dbg in ubuntu eoan.

No description available for bluez-dbg in ubuntu eoan.

bluez-hcidump: No summary available for bluez-hcidump in ubuntu eoan.

No description available for bluez-hcidump in ubuntu eoan.

bluez-obexd: No summary available for bluez-obexd in ubuntu eoan.

No description available for bluez-obexd in ubuntu eoan.

bluez-tests: No summary available for bluez-tests in ubuntu eoan.

No description available for bluez-tests in ubuntu eoan.

libbluetooth-dev: No summary available for libbluetooth-dev in ubuntu eoan.

No description available for libbluetooth-dev in ubuntu eoan.

libbluetooth3: No summary available for libbluetooth3 in ubuntu eoan.

No description available for libbluetooth3 in ubuntu eoan.

libbluetooth3-dbg: No summary available for libbluetooth3-dbg in ubuntu eoan.

No description available for libbluetooth3-dbg in ubuntu eoan.