Skip to content
OpenAdvisories
Medium RHSA-2022:2081 1 CVE

Red Hat Security Advisory: bluez security update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-cups 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-cups-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-debugsource 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-hid2hci-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-libs-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-obexd-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-cups-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-debugsource 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-hid2hci 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-hid2hci-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-libs 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-libs-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-obexd 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-obexd-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-cups-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-debugsource 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-hid2hci-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-libs-debuginfo 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-libs-devel 0:5.56-3.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-obexd-debuginfo 0:5.56-3.el8

Vulnerabilities 1

  • Medium 4.3
    CVE-2021-41229

    Memory leak in BlueZ

    BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over …

    BlueZ BlueZ bluez bluez Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2025034
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2081.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-41229
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-41229
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-41229