Skip to content
OpenAdvisories
Medium ALAS2-2020-1504 1 CVE

Moderate: bluez security update (Amazon Linux 2)

Published Oct 22, 2020 · Updated Oct 22, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-0556: Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access 1814293: CVE-2020-0556 bluez: Improper access control in subsystem could result in privilege escalation and DoS

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 bluez 0:5.44-7.amzn2
Amazon Linux · 2 bluez-cups 0:5.44-7.amzn2
Amazon Linux · 2 bluez-debuginfo 0:5.44-7.amzn2
Amazon Linux · 2 bluez-hid2hci 0:5.44-7.amzn2
Amazon Linux · 2 bluez-libs 0:5.44-7.amzn2
Amazon Linux · 2 bluez-libs-devel 0:5.44-7.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-0556.html