Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Fedora 38: 2023-26a02512e1 moderate: Bluez 5.70 HID exploit mitigation

fedora
Calendar Grey December 11, 2023
Dist Fedora Esm H88
Download the latest Fedora update for bluez that addresses CVE-2023-45866, enhancing Bluetooth functionality.
* Install default input.conf/network.conf * Add mitigation for CVE-2023-45866

Summary

Utilities for use in Bluetooth applications:

- avinfo

- bluemoon

- bluetoothctl

- bluetoothd

- btattach

- btmon

- hex2hcd

- l2ping

- l2test

- mpris-proxy

- rctest

The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.

Update Information:

* Install default input.conf/network.conf * Add mitigation for CVE-2023-45866

Topics%20covered

Topics Covered

security advisory Fedora moderate threat Bluetooth CVE mitigation HID exploit

Change Log

* Thu Dec 7 2023 Peter Robinson - 5.70-5 - Install default input.conf/network.conf * Thu Dec 7 2023 Peter Robinson - 5.70-4 - Add mitigation for CVE-2023-45866 * Sun Nov 19 2023 Peter Robinson - 5.70-3 - Fix some input devices disconnecting right after connecting - Explicitly enable Bluetooth BAP/BASS/CSIP/MCP/MICP/VCP profiles * Mon Oct 2 2023 Sandro Bonazzola - 5.70-2 - Fix access modes for /etc/bluetooth and /var/lib/bluetooth as expected by bluetooth.service. - Resolves: fedora#2144504

References


[ 1 ] Bug #2247548 - Unable to connect Dualshock4 v2 via Bluetooth (immediately disconnects after pairing) https://bugzilla.redhat.com/show_bug.cgi?id=2247548 [ 2 ] Bug #2253392 - TRIAGE CVE-2023-45866 bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253392

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-26a02512e1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: bluez
Product: Fedora 38
Version: 5.70
Release: 5.fc38
URL:
Summary: Bluetooth utilities

Topics%20covered

Topics Covered

security advisory Fedora moderate threat Bluetooth CVE mitigation HID exploit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here