UbuntuUpdates.org

Package "libbluetooth-dev"

Name: libbluetooth-dev

Description:

Development files for using the BlueZ Linux Bluetooth library
Latest version: 5.64-0ubuntu1.4
Release: jammy (22.04)
Level: updates
Repository: main
Head package: bluez
Homepage: http://www.bluez.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libbluetooth-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libbluetooth-dev" in Jammy

Repository Area Version
base main 5.64-0ubuntu1
security main 5.64-0ubuntu1.4

Changelog

Version: 5.64-0ubuntu1.4 2025-01-22 19:07:04 UTC

  bluez (5.64-0ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: code exec via Phone Book Access Profile
    - debian/patches/CVE-2023-502xx.patch: fix not checking counter length
      in obexd/client/pbap.c.
    - CVE-2023-50229
    - CVE-2023-50230

 -- Marc Deslauriers <email address hidden> Tue, 21 Jan 2025 08:12:00 -0500
Source diff to previous version
CVE-2023-50229 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers
CVE-2023-50230 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers

Version: 5.64-0ubuntu1.3 2024-06-05 23:07:08 UTC

  bluez (5.64-0ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: null pointer dereference
    - debian/patches/CVE-2022-3563.patch: Fix null dereference in
      mgmt-tester.c.
    - CVE-2022-3563
  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2023-27349.patch: Fix crash while handling
      unsupported events in avrcp.c.
    - CVE-2023-27349

 -- Fabian Toepfer <email address hidden> Wed, 05 Jun 2024 12:10:29 +0200
Source diff to previous version
CVE-2022-3563 A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/
CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacker

Version: 5.64-0ubuntu1.1 2023-12-07 05:06:55 UTC

  bluez (5.64-0ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: make conf compliant to HID specification
    - debian/patches/CVE-2023-45866.patch: input.conf: Change default of
      ClassicBondedOnly
    - CVE-2023-45866

 -- Nishit Majithia <email address hidden> Wed, 29 Nov 2023 17:01:28 +0530


About   -   Send Feedback to @ubuntu_updates