Red Hat Security AdvisoryRHSA-2017:2685
bluez security update
Released 2017-09-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bluez-5.44-4.el7_4, bluez-libs-5.44-4.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) bluez-cups-5.44-4.el7_4, bluez-hid2hci-5.44-4.el7_4, bluez-libs-devel-5.44-4.el7_4
- Red Hat Enterprise Linux ComputeNode (v. 7) bluez-5.44-4.el7_4, bluez-libs-5.44-4.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bluez-5.44-4.el7_4, bluez-cups-5.44-4.el7_4, bluez-hid2hci-5.44-4.el7_4 +1
- Red Hat Enterprise Linux Desktop (v. 6) bluez-4.66-2.el6_9, bluez-libs-4.66-2.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) bluez-alsa-4.66-2.el6_9, bluez-compat-4.66-2.el6_9, bluez-cups-4.66-2.el6_9 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bluez-4.66-2.el6_9, bluez-alsa-4.66-2.el6_9, bluez-compat-4.66-2.el6_9 +4
- Red Hat Enterprise Linux Server (v. 6) bluez-4.66-2.el6_9, bluez-libs-4.66-2.el6_9, bluez-libs-4.66-2.el6_9.ppc
- Red Hat Enterprise Linux Server (v. 7) bluez-5.44-4.el7_4, bluez-libs-5.44-4.el7_4, bluez-libs-5.44-4.el7_4.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) bluez-alsa-4.66-2.el6_9, bluez-alsa-4.66-2.el6_9.ppc, bluez-compat-4.66-2.el6_9 +5
- Red Hat Enterprise Linux Server Optional (v. 7) bluez-5.44-4.el7_4, bluez-cups-5.44-4.el7_4, bluez-hid2hci-5.44-4.el7_4 +2
- Red Hat Enterprise Linux Workstation (v. 6) bluez-4.66-2.el6_9, bluez-libs-4.66-2.el6_9
- Red Hat Enterprise Linux Workstation (v. 7) bluez-5.44-4.el7_4, bluez-libs-5.44-4.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) bluez-alsa-4.66-2.el6_9, bluez-compat-4.66-2.el6_9, bluez-cups-4.66-2.el6_9 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) bluez-cups-5.44-4.el7_4, bluez-hid2hci-5.44-4.el7_4, bluez-libs-devel-5.44-4.el7_4
Fixes 1 record
Priority LOW 39
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory.
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.07774 · Published 2017-09-12 · Partial fix CWE-200
