Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Slackware 14.1 SSA-2015-356-01 Critical Blueman Escalation Fix

slackware
Calendar Grey December 23, 2015
Scroller Slackware
Updated blueman packages now available for Slackware to resolve urgent local privilege elevation vulnerability.
New blueman packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/blueman-r708-i486-4_slack14.1.txz: Rebuilt. This update fixes a local privilege escalation vulnerability. For more information, see: https://www.cve.org/CVERecord?id=CVE-2015-8612 (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical privilege escalation slackware blueman

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.37: ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/blueman-r708-i486-2_slack13.37.txz
Updated package for Slackware x86_64 13.37: ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/blueman-r708-x86_64-2_slack13.37.txz
Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/blueman-r708-i486-3_slack14.0.txz
Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/blueman-r708-x86_64-3_slack14.0.txz
Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/blueman-r708-i486-4_slack14.1.txz
Updated package for Slack...

Read the Full Advisory

MD5 Signatures

Slackware 13.37 package: 65009da30d3cf60c32e561b0085ee1fd blueman-r708-i486-2_slack13.37.txz
Slackware x86_64 13.37 package: a0e967b8857c9d71a9e1373d0c864d04 blueman-r708-x86_64-2_slack13.37.txz
Slackware 14.0 package: 37fcc1290f1a07cfd310f0c0b289eccb blueman-r708-i486-3_slack14.0.txz
Slackware x86_64 14.0 package: 62d2086a3ac4d71963722fd7583b275a blueman-r708-x86_64-3_slack14.0.txz
Slackware 14.1 package: b974a87cad4f3b9521a1402c75e1b87e blueman-r708-i486-4_slack14.1.txz
Slackware x86_64 14.1 package: d5b9c061018e190a7e770bee1ddc3601 blueman-r708-x86_64-4_slack14.1.txz
Slackware -current package: 0a37e8f7294902a9315455a3d8ecd54f xap/blueman-2.0.3-i586-1.txz
Slackware x86_64 -current package: be29b1d932617c1cec46c2e8042eb525 xap/blueman-2.0.3-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical privilege escalation slackware blueman

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg blueman-r708-i486-4_slack14.1.txz