Skip to content
OpenAdvisories
Low ELSA-2022-2081 1 CVE

Low: bluez security update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Summary

[5.56-3]
+ bluez-5.56-3
- Fixing (#2027434)
- Fixing CVE-2021-41229

[5.56-2]
+ bluez-5.56-2
- Fixing (#1968392)
- Removing bccmd check from tests

[5.56-1]
+ bluez-5.56-1
- Fixing (#1965057)
- Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 8 bluez 0:5.56-3.el8
Oracle Linux · 8 bluez-cups 0:5.56-3.el8
Oracle Linux · 8 bluez-hid2hci 0:5.56-3.el8
Oracle Linux · 8 bluez-libs 0:5.56-3.el8
Oracle Linux · 8 bluez-libs-devel 0:5.56-3.el8
Oracle Linux · 8 bluez-obexd 0:5.56-3.el8

Vulnerabilities 1

  • Medium 4.3

    Memory leak in BlueZ

    BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over …