Summary
Vaisha Bernard discovered that blueman did not properly sanitize input on
the d-bus interface to blueman-mechanism. A local attacker could possibly
use this issue to escalate privileges and run arbitrary code or cause a
denial of service. (CVE-2020-15238)
While a previous security update fixed the issue, this update provides
additional improvements by enabling PolicyKit authentication for
privileged commands.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | blueman | 2.1.2-1ubuntu0.2 |
References
-
report
https://launchpad.net/bugs/1897287