Format: 1.8 Date: Mon, 23 Mar 2020 08:39:08 -0400 Source: bluez Binary: libbluetooth3 libbluetooth3-dbg libbluetooth-dev bluetooth bluez bluez-dbg bluez-cups bluez-obexd bluez-hcidump bluez-tests Architecture: ppc64el Version: 5.37-0ubuntu5.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: bluetooth - Bluetooth support bluez - Bluetooth tools and daemons bluez-cups - Bluetooth printer driver for CUPS bluez-dbg - Bluetooth tools and daemons (with debugging symbols) bluez-hcidump - Analyses Bluetooth HCI packets bluez-obexd - bluez obex daemon bluez-tests - BlueZ test tools and scripts libbluetooth-dev - Development files for using the BlueZ Linux Bluetooth library libbluetooth3 - Library to use the BlueZ Linux Bluetooth stack libbluetooth3-dbg - Library to use the BlueZ Linux Bluetooth stack with debugging sym Changes: bluez (5.37-0ubuntu5.3) xenial-security; urgency=medium . * SECURITY UPDATE: buffer overflow in parse_line function - debian/patches/CVE-2016-7837.patch: make sure we don't write past the end of the array in tools/csr.c. - CVE-2016-7837 * SECURITY UPDATE: privilege escalation via improper access control - debian/patches/CVE-2020-0556-pre1.patch: use .accept and .disconnect instead of attio in profiles/input/hog.c, src/device.c, src/device.h. - debian/patches/CVE-2020-0556-1.patch: HOGP must only accept data from bonded devices in profiles/input/hog.c. - debian/patches/CVE-2020-0556-2.patch: HID accepts bonded device connections only in profiles/input/device.c, profiles/input/device.h, profiles/input/input.conf, profiles/input/manager.c. - debian/patches/CVE-2020-0556-3.patch: attempt to set security level if not bonded in profiles/input/hog.c. - debian/patches/CVE-2020-0556-4.patch: add LEAutoSecurity setting to input.conf in profiles/input/device.h, profiles/input/hog.c, profiles/input/input.conf, profiles/input/manager.c. - CVE-2020-0556 Checksums-Sha1: c91ca8a53dc8c0dc2aaa927d2759eb5799f27e2b 938 bluez-cups-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 4e6ed41a02979d3b975ab808188b794c2ee8d46d 58706 bluez-cups_5.37-0ubuntu5.3_ppc64el.deb 50ccee56e8edd91d5bc9e4afa4225a5d37a9f244 7252586 bluez-dbg_5.37-0ubuntu5.3_ppc64el.deb d7217b205c67ad406eccbdd3b3139ee26a891622 942 bluez-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb adbc1efe6127979e2cbf1bcd027ca9cb635677ec 1066 bluez-hcidump-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 8c22f7c482490fa2c50731c52c91a406db7bb896 125236 bluez-hcidump_5.37-0ubuntu5.3_ppc64el.deb 97ec285efe27f7110445cf8acbe58abd4cf1f9df 1038 bluez-obexd-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb d4e465ddb0606d572ee0e257c62b4487a821f664 154278 bluez-obexd_5.37-0ubuntu5.3_ppc64el.deb f0c766bf53205205f39ae0f5d77e82650c0a07ac 930 bluez-tests-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb cfc5d79e99d49595f298c3f68df5e4e507fac80a 208764 bluez-tests_5.37-0ubuntu5.3_ppc64el.deb 8a683ac0fbbefa61b07e3f3f02564023a8b74082 827648 bluez_5.37-0ubuntu5.3_ppc64el.deb 4cc70e7806ab386c26f80ea10c8f24351498bf11 892 libbluetooth-dev-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb d5bbb00d64ebe5e123666fc2065d45bb51ab7389 149120 libbluetooth-dev_5.37-0ubuntu5.3_ppc64el.deb c251c24c479d6740c0c95009ca561b6a0bae07e5 2992 libbluetooth3-dbg_5.37-0ubuntu5.3_ppc64el.deb 2b311cdc7b4f7148a8e22ff31b1f931edfba95f3 898 libbluetooth3-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb d216bdddfc5e89d1889fb566c1fe0f504efc6e22 59594 libbluetooth3_5.37-0ubuntu5.3_ppc64el.deb Checksums-Sha256: 04d1b64ce4f3e4461bb5da87ae9b739851f0b09b731e365d9f5eaa471e7380cf 938 bluez-cups-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 5d051124228af54d9cb9ffa91c499f719fc0dd88a48de82af621e15aac5bc360 58706 bluez-cups_5.37-0ubuntu5.3_ppc64el.deb 85a26aa6d65e5400fd5cd9744bcc22685afa00a246da8bc7288bec7f44748136 7252586 bluez-dbg_5.37-0ubuntu5.3_ppc64el.deb 5f9cd9c59abc0e732e4830cfa95c3ce4c410ecf0b066da63e37bd9071f4c2b33 942 bluez-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 3d751b583723d6680021d67f43ab87010c6283f9b563ca6026daf1b9952a7852 1066 bluez-hcidump-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb eff9bf0a841c5af546f1693b4daf44953b912e37cc1952327db1a22824331e73 125236 bluez-hcidump_5.37-0ubuntu5.3_ppc64el.deb ec7bd2a2d42ae0caa9aaa5152fd9eda788a0503fc857b9a74384b6b5b9b836d7 1038 bluez-obexd-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 7df466ba35b8468b68242a0c97161bee687cacdce270cd83258e64156c0191dc 154278 bluez-obexd_5.37-0ubuntu5.3_ppc64el.deb 4c805b5ce6e05de87b83247b014561c9532985c084ab451a04f2f03e39eeeb4d 930 bluez-tests-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 6997db1743655d8c1e982379f4398b8959750ac2ca8e9a5c143af5571493bd6e 208764 bluez-tests_5.37-0ubuntu5.3_ppc64el.deb 21517fd720e81cb1e7aab93fa9910b071630abdda88f3b93b554d070860572e2 827648 bluez_5.37-0ubuntu5.3_ppc64el.deb 89542c9ef0ae10dcdfdd1cbc89a623b87fa554625dc616db7b841fc25d1e5149 892 libbluetooth-dev-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 376d4a8b63e365cd75eb51835509b86a337e09b369bf48932b264475151f9548 149120 libbluetooth-dev_5.37-0ubuntu5.3_ppc64el.deb f8ee4c4824f311cdd05ac48cc365bb6db058e555296ebc35c2f92a7e9eba0cf2 2992 libbluetooth3-dbg_5.37-0ubuntu5.3_ppc64el.deb ebe32e45dddf18e3bec56a0f9ad23a844c981c13d1a7578539924edc455c7eb7 898 libbluetooth3-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 34ca63c0d35024e73aee1e1317772ef518648fa3657d67847d51d055f8fc2ce0 59594 libbluetooth3_5.37-0ubuntu5.3_ppc64el.deb Files: 5e0d77da191b203ae3d1f7963964fced 938 admin extra bluez-cups-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb f45fd1d6176ffad30b0e4fcb43bc7a6b 58706 admin optional bluez-cups_5.37-0ubuntu5.3_ppc64el.deb d003e95dccc40fe87174caabb8b126b0 7252586 debug extra bluez-dbg_5.37-0ubuntu5.3_ppc64el.deb a4ab05d3f80f61985356858751879041 942 admin extra bluez-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb d5575b92c9ea42c6a9adf46d0ebf452e 1066 admin extra bluez-hcidump-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 998bd1c90a02fa8d4c49b61b67a40ae1 125236 admin optional bluez-hcidump_5.37-0ubuntu5.3_ppc64el.deb 3d63c5510f6bdc0e8eed7ff0c1ef1e6b 1038 admin extra bluez-obexd-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 8b2e1c8e91e101bd3d51defb7eb6f33a 154278 admin optional bluez-obexd_5.37-0ubuntu5.3_ppc64el.deb 053adf1016d4d2c50233b2ac50a20619 930 admin extra bluez-tests-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb 121139bcb0ad1baf0db62f4ec209b767 208764 admin optional bluez-tests_5.37-0ubuntu5.3_ppc64el.deb 6b46c217fcd076ca02075c9d2d9a47dc 827648 admin optional bluez_5.37-0ubuntu5.3_ppc64el.deb c8d57b821771925afc9d679f91a7d89c 892 libdevel extra libbluetooth-dev-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb b450929b2877641ef76976130ba9b5ef 149120 libdevel extra libbluetooth-dev_5.37-0ubuntu5.3_ppc64el.deb 7c8231c4dae8353445639a5519db1df5 2992 debug extra libbluetooth3-dbg_5.37-0ubuntu5.3_ppc64el.deb 479227d602ae69eed4697d17ce594cb2 898 libs extra libbluetooth3-dbgsym_5.37-0ubuntu5.3_ppc64el.ddeb f747d902bcf8f464db785327949b9923 59594 libs optional libbluetooth3_5.37-0ubuntu5.3_ppc64el.deb Original-Maintainer: Debian Bluetooth Maintainers