bluez (SL6, SL7)

Synopsis: Moderate: bluez security update
Advisory ID: SLSA-2017:2685-1
Issue Date: 2017-09-12
CVE Numbers: CVE-2017-1000250

Security Fix(es):

* An information-disclosure flaw was found in the bluetoothd
implementation of the Service Discovery Protocol (SDP). A specially
crafted Bluetooth device could, without prior pairing or user
interaction, retrieve portions of the bluetoothd process memory,
including potentially sensitive information such as Bluetooth encryption
keys. (CVE-2017-1000250)

SL6
x86_64
bluez-4.66-2.el6_9.x86_64.rpm
bluez-libs-4.66-2.el6_9.x86_64.rpm
bluez-alsa-4.66-2.el6_9.x86_64.rpm
bluez-compat-4.66-2.el6_9.x86_64.rpm
bluez-cups-4.66-2.el6_9.x86_64.rpm
bluez-gstreamer-4.66-2.el6_9.x86_64.rpm
bluez-libs-devel-4.66-2.el6_9.x86_64.rpm
bluez-libs-4.66-2.el6_9.i686.rpm
i386
bluez-alsa-4.66-2.el6_9.i686.rpm
bluez-compat-4.66-2.el6_9.i686.rpm
bluez-cups-4.66-2.el6_9.i686.rpm
bluez-gstreamer-4.66-2.el6_9.i686.rpm
bluez-libs-devel-4.66-2.el6_9.i686.rpm
bluez-4.66-2.el6_9.i686.rpm
bluez-libs-4.66-2.el6_9.i686.rpm
bluez-debuginfo-4.66-2.el6_9.i686.rpm
SL7
x86_64
bluez-libs-devel-5.44-4.el7_4.x86_64.rpm
bluez-libs-devel-5.44-4.el7_4.i686.rpm
bluez-cups-5.44-4.el7_4.x86_64.rpm
bluez-hid2hci-5.44-4.el7_4.x86_64.rpm
bluez-5.44-4.el7_4.x86_64.rpm
bluez-libs-5.44-4.el7_4.i686.rpm
bluez-libs-5.44-4.el7_4.x86_64.rpm

– Scientific Linux Development Team