Описание
Security update for bluez
This update for bluez fixes the following issues:
- CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
bluez-5.48-lp150.4.16.1
bluez-auto-enable-devices-5.48-lp150.4.16.1
bluez-cups-5.48-lp150.4.16.1
bluez-devel-5.48-lp150.4.16.1
bluez-devel-32bit-5.48-lp150.4.16.1
bluez-test-5.48-lp150.4.16.1
libbluetooth3-5.48-lp150.4.16.1
libbluetooth3-32bit-5.48-lp150.4.16.1
Ссылки
- E-Mail link for openSUSE-SU-2019:2585-1
- SUSE Security Ratings
- SUSE Bug 1013712
- SUSE CVE CVE-2016-9798 page
Описание
In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
Затронутые продукты
openSUSE Leap 15.0:bluez-5.48-lp150.4.16.1
openSUSE Leap 15.0:bluez-auto-enable-devices-5.48-lp150.4.16.1
openSUSE Leap 15.0:bluez-cups-5.48-lp150.4.16.1
openSUSE Leap 15.0:bluez-devel-32bit-5.48-lp150.4.16.1
Ссылки
- CVE-2016-9798
- SUSE Bug 1013708
- SUSE Bug 1013712
- SUSE Bug 1013732