GNU bug report logs - #40044
BlueZ CVE-2020-0556

Previous Next

Package: guix-patches;

Reported by: Leo Famulari <leo <at> famulari.name>

Date: Thu, 12 Mar 2020 19:25:01 UTC

Severity: normal

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

Full log

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: BlueZ CVE-2020-0556
Date: Thu, 12 Mar 2020 15:24:14 -0400

There's some kind of privilege escalation bug in BlueZ:

https://lore.kernel.org/linux-bluetooth/20200310023516.209146-1-alainm <at> chromium.org/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html

They released 5.53, so here are patches that graft the update or graft
just the upstream patches.
This bug report was last modified 5 years and 131 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.