UbuntuUpdates.org

Package "bluetooth"

Name: bluetooth

Description:

Bluetooth support
Latest version: 5.53-0ubuntu3.8
Release: focal (20.04)
Level: updates
Repository: universe
Head package: bluez
Homepage: http://www.bluez.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "bluetooth"

All arch deb package
APT INSTALL

Other versions of "bluetooth" in Focal

Repository Area Version
base universe 5.53-0ubuntu3
security universe 5.53-0ubuntu3.8

Changelog

Version: 5.53-0ubuntu3.3 2021-07-01 12:06:26 UTC

  bluez (5.53-0ubuntu3.3) focal; urgency=medium

  * debian/patches/0001-fix-reading-from-rfkill-socket.patch:
    - fix reading from rfkill socket (lp: #1933221)

 -- Andy Chi <email address hidden> Tue, 22 Jun 2021 14:27:12 +0800
Source diff to previous version
1933221 Blutooth on/off does not work properly from gnome-control-center

Version: 5.53-0ubuntu3.2 2021-06-16 15:06:31 UTC

  bluez (5.53-0ubuntu3.2) focal-security; urgency=medium

  * SECURITY UPDATE: secure pairing passkey brute force
    - debian/patches/CVE-2020-26558.patch: fix not properly checking for
      secure flags in src/shared/att-types.h, src/shared/gatt-server.c.
    - CVE-2020-26558
  * SECURITY UPDATE: DoS or code execution via double-free
    - debian/patches/CVE-2020-27153.patch: fix possible crash on disconnect
      in src/shared/att.c.
    - CVE-2020-27153
  * SECURITY UPDATE: info disclosure via out of bounds read
    - debian/patches/CVE-2021-3588.patch: when client features is read
      check if the offset is within the cli_feat bounds in
      src/gatt-database.c.
    - CVE-2021-3588

 -- Marc Deslauriers <email address hidden> Wed, 09 Jun 2021 11:06:38 -0400
Source diff to previous version
CVE-2020-26558 Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the
CVE-2020-27153 In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a
CVE-2021-3588 The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an ar

Version: 5.53-0ubuntu3.1 2021-05-11 18:07:29 UTC

  bluez (5.53-0ubuntu3.1) focal; urgency=medium

  * Add support for the pi 400 (LP: #1903048)

 -- William 'jawn-smith' Wilson <email address hidden> Mon, 15 Mar 2021 19:25:22 +0000
1903048 [SRU] Bluetooth won't activate on the pi 400


About   -   Send Feedback to @ubuntu_updates