RedHat: Moderate: bluez-utils security update

    Date14 May 2007
    CategoryRed Hat
    3126
    Posted ByLinuxSecurity Advisories
    Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
    - ---------------------------------------------------------------------
                       Red Hat Security Advisory
    
    Synopsis:          Moderate: bluez-utils security update
    Advisory ID:       RHSA-2007:0065-01
    Advisory URL:      https://rhn.redhat.com/errata/RHSA-2007-0065.html
    Issue date:        2007-05-14
    Updated on:        2007-05-14
    Product:           Red Hat Enterprise Linux
    CVE Names:         CVE-2006-6899 
    - ---------------------------------------------------------------------
    
    1. Summary:
    
    Updated bluez-utils packages that fix a security flaw are now available for
    Red Hat Enterprise Linux 4.
    
    This update has been rated as having moderate security impact by the Red
    Hat Security Response Team.
    
    2. Relevant releases/architectures:
    
    Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, x86_64
    Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
    Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
    Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64
    
    3. Problem description:
    
    The bluez-utils package contains Bluetooth daemons and utilities.
    
    A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker
    would have been able to inject keyboard and mouse events via a Bluetooth
    connection without any authorization. (CVE-2006-6899)
    
    Note that Red Hat Enterprise Linux does not come with the Bluetooth HID
    daemon enabled by default.
    
    Users of bluez-utils are advised to upgrade to these updated packages, which
    contains a backported patch to correct this issue.
    
    4. Solution:
    
    Before applying this update, make sure all previously released errata
    relevant to your system have been applied.
    
    This update is available via Red Hat Network.  To use Red Hat Network,
    launch the Red Hat Update Agent with the following command:
    
    up2date
    
    This will start an interactive process that will result in the appropriate
    RPMs being upgraded on your system.
    
    5. Bug IDs fixed (http://bugzilla.redhat.com/):
    
    227014 - CVE-2006-6899 Bluetooth HID key events injection flaw
    
    6. RPMs required:
    
    Red Hat Enterprise Linux AS version 4:
    
    SRPMS:
    ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/bluez-utils-2.10-2.2.src.rpm
    f7a4d82ed172f4984e8e1abecf723eab  bluez-utils-2.10-2.2.src.rpm
    
    i386:
    818e3b413b31f4fc68e6388dc3feca16  bluez-utils-2.10-2.2.i386.rpm
    8ab01e39c64083f86da77b56f1b9ed9c  bluez-utils-cups-2.10-2.2.i386.rpm
    88944ec7e5a6fa381ec30d9251230827  bluez-utils-debuginfo-2.10-2.2.i386.rpm
    
    ia64:
    ba34fe7467efcb74df5896e42261cfb9  bluez-utils-2.10-2.2.ia64.rpm
    864af7581f08ad15f6cbd9961fb53880  bluez-utils-cups-2.10-2.2.ia64.rpm
    7bc5e16ae46f22aea7208725920de642  bluez-utils-debuginfo-2.10-2.2.ia64.rpm
    
    ppc:
    d7a59edfaeb01d98ec4643958c8c5cdd  bluez-utils-2.10-2.2.ppc.rpm
    24b8e2e784629942997068f591dca695  bluez-utils-cups-2.10-2.2.ppc.rpm
    909bebe0993c4531da2d80b077d63661  bluez-utils-debuginfo-2.10-2.2.ppc.rpm
    
    x86_64:
    230bdc2688fb568dd6402d7728c40cb4  bluez-utils-2.10-2.2.x86_64.rpm
    2c83d5d0ff12b0d627f609e75586fac4  bluez-utils-cups-2.10-2.2.x86_64.rpm
    95964f5ff634df86ff613d0fc0e8c9d1  bluez-utils-debuginfo-2.10-2.2.x86_64.rpm
    
    Red Hat Enterprise Linux Desktop version 4:
    
    SRPMS:
    ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/bluez-utils-2.10-2.2.src.rpm
    f7a4d82ed172f4984e8e1abecf723eab  bluez-utils-2.10-2.2.src.rpm
    
    i386:
    818e3b413b31f4fc68e6388dc3feca16  bluez-utils-2.10-2.2.i386.rpm
    8ab01e39c64083f86da77b56f1b9ed9c  bluez-utils-cups-2.10-2.2.i386.rpm
    88944ec7e5a6fa381ec30d9251230827  bluez-utils-debuginfo-2.10-2.2.i386.rpm
    
    x86_64:
    230bdc2688fb568dd6402d7728c40cb4  bluez-utils-2.10-2.2.x86_64.rpm
    2c83d5d0ff12b0d627f609e75586fac4  bluez-utils-cups-2.10-2.2.x86_64.rpm
    95964f5ff634df86ff613d0fc0e8c9d1  bluez-utils-debuginfo-2.10-2.2.x86_64.rpm
    
    Red Hat Enterprise Linux ES version 4:
    
    SRPMS:
    ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/bluez-utils-2.10-2.2.src.rpm
    f7a4d82ed172f4984e8e1abecf723eab  bluez-utils-2.10-2.2.src.rpm
    
    i386:
    818e3b413b31f4fc68e6388dc3feca16  bluez-utils-2.10-2.2.i386.rpm
    8ab01e39c64083f86da77b56f1b9ed9c  bluez-utils-cups-2.10-2.2.i386.rpm
    88944ec7e5a6fa381ec30d9251230827  bluez-utils-debuginfo-2.10-2.2.i386.rpm
    
    ia64:
    ba34fe7467efcb74df5896e42261cfb9  bluez-utils-2.10-2.2.ia64.rpm
    864af7581f08ad15f6cbd9961fb53880  bluez-utils-cups-2.10-2.2.ia64.rpm
    7bc5e16ae46f22aea7208725920de642  bluez-utils-debuginfo-2.10-2.2.ia64.rpm
    
    x86_64:
    230bdc2688fb568dd6402d7728c40cb4  bluez-utils-2.10-2.2.x86_64.rpm
    2c83d5d0ff12b0d627f609e75586fac4  bluez-utils-cups-2.10-2.2.x86_64.rpm
    95964f5ff634df86ff613d0fc0e8c9d1  bluez-utils-debuginfo-2.10-2.2.x86_64.rpm
    
    Red Hat Enterprise Linux WS version 4:
    
    SRPMS:
    ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/bluez-utils-2.10-2.2.src.rpm
    f7a4d82ed172f4984e8e1abecf723eab  bluez-utils-2.10-2.2.src.rpm
    
    i386:
    818e3b413b31f4fc68e6388dc3feca16  bluez-utils-2.10-2.2.i386.rpm
    8ab01e39c64083f86da77b56f1b9ed9c  bluez-utils-cups-2.10-2.2.i386.rpm
    88944ec7e5a6fa381ec30d9251230827  bluez-utils-debuginfo-2.10-2.2.i386.rpm
    
    ia64:
    ba34fe7467efcb74df5896e42261cfb9  bluez-utils-2.10-2.2.ia64.rpm
    864af7581f08ad15f6cbd9961fb53880  bluez-utils-cups-2.10-2.2.ia64.rpm
    7bc5e16ae46f22aea7208725920de642  bluez-utils-debuginfo-2.10-2.2.ia64.rpm
    
    x86_64:
    230bdc2688fb568dd6402d7728c40cb4  bluez-utils-2.10-2.2.x86_64.rpm
    2c83d5d0ff12b0d627f609e75586fac4  bluez-utils-cups-2.10-2.2.x86_64.rpm
    95964f5ff634df86ff613d0fc0e8c9d1  bluez-utils-debuginfo-2.10-2.2.x86_64.rpm
    
    These packages are GPG signed by Red Hat for security.  Our key and 
    details on how to verify the signature are available from
    https://www.redhat.com/security/team/key/#package
    
    7. References:
    
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6899
    http://www.redhat.com/security/updates/classification/#moderate
    
    8. Contact:
    
    The Red Hat security contact is .  More contact
    details at https://www.redhat.com/security/team/contact/
    
    Copyright 2007 Red Hat, Inc.
    
    You are not authorised to post comments.

    LinuxSecurity Poll

    Do you reuse passwords across multiple accounts?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /component/communitypolls/?task=poll.vote
    13
    radio
    [{"id":"55","title":"Yes","votes":"0","type":"x","order":"1","pct":0,"resources":[]},{"id":"56","title":"No","votes":"0","type":"x","order":"2","pct":0,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.