ALSA-2021:1598

Source
https://errata.almalinux.org/8/ALSA-2021-1598.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1598.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2021:1598
Related
Published
2021-05-18T05:37:07Z
Modified
2021-08-11T08:54:00Z
Summary
Moderate: bluez security update
Details

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.

Security Fix(es):

  • bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE (CVE-2020-27153)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / bluez-libs-devel

Package

Name
bluez-libs-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.52-4.el8.alma