Summary
The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.
Security Fix(es):
* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | bluez | 5.63-3.el8_10.alma.1 |
| AlmaLinux · 8 | bluez-cups | 5.63-3.el8_10.alma.1 |
| AlmaLinux · 8 | bluez-hid2hci | 5.63-3.el8_10.alma.1 |
| AlmaLinux · 8 | bluez-libs | 5.63-3.el8_10.alma.1 |
| AlmaLinux · 8 | bluez-libs-devel | 5.63-3.el8_10.alma.1 |
| AlmaLinux · 8 | bluez-obexd | 5.63-3.el8_10.alma.1 |
Vulnerabilities 1
-
Unscored —CVE-2023-45866 Public exploit
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encr…