Ubuntu
blueman package

  1. Groovy (20.10)
  2. Bug #1897287
  3. Comment #5

Comment 5 for bug 1897287

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Hello cschramm, excellent analysis, thanks! Especially, thanks for taking a look at the larger issues to discover the missing polkit support.

The 2.0 patch didn't make it through to Launchpad; could you attach that?

Has GitHub or Debian assigned CVE(s?) for these issues yet?

Does the missing polkit support cause the system to fail open, and allow anyone on the system to manage interfaces?

Because blueman and dhcpcd5 are in universe, we may or may not be providing fixes for this issue. Thus it may not make sense to hold updates for Debian or upstream on our account.

Thanks