shield Security update for bluez

SUSE-SLE-SERVER-12-SP4-2019-1339

This update for bluez fixes the following issues: Security vulnerability addressed: - CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708). - CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712). - CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171). - CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893). - CVE-2016-9918: Fixed an out-of-bounds stack read in packet_hexdump(), which could be triggered by processing a corrupted dump file and will result in a crash of the hcidump tool (bsc#1015173)

• Release Date
  May 24 2019
• References
  Bugzilla: 1015173, 1013712, 1013893, 1015171, 1013708
  CVEs: CVE-2016-9917, CVE-2016-9802, CVE-2016-9798, CVE-2016-9797, CVE-2016-9918
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  bluez
  Bluetooth Stack for Linux

  5.13-5.12.1

  lock rpm

  lock src

  libbluetooth3
  Bluetooth Libraries

  5.13-5.12.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  bluez
  Bluetooth Stack for Linux

  5.13-5.12.1

  lock rpm

  lock src

  libbluetooth3
  Bluetooth Libraries

  5.13-5.12.1

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  bluez
  Bluetooth Stack for Linux

  5.13-5.12.1

  lock rpm

  lock src

  libbluetooth3
  Bluetooth Libraries

  5.13-5.12.1

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  bluez
  Bluetooth Stack for Linux

  5.13-5.12.1

  lock rpm

  lock src

  libbluetooth3
  Bluetooth Libraries

  5.13-5.12.1

  lock rpm