-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  blueman (SSA:2018-213-01)

New blueman packages are available for Slackware 14.2 and -current to
fix a security issue.


Here are the details from the Slackware 14.2 ChangeLog:
+--------------------------+
patches/packages/blueman-2.0.6-i586-1_slack14.2.txz:  Upgraded.
  This update fixes an issue where blueman-mechanism did not enforce the
  polkit action 'org.blueman.network.setup' for which a polkit policy is
  shipped. This meant that any user with access to the D-Bus system bus was
  able to access the related API without authentication. The result was an
  unspecified impact on the networking stack.
  Thanks to Matthias Gerstner for discovering this issue.
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.

Updated package for Slackware 14.2:

Updated package for Slackware x86_64 14.2:

Updated package for Slackware -current:

Updated package for Slackware x86_64 -current:


MD5 signatures:
+-------------+

Slackware 14.2 package:
408e8b08dd6014d6768cfba739940bd5  blueman-2.0.6-i586-1_slack14.2.txz

Slackware x86_64 14.2 package:
4f3ac84da15d5e60b31da00cf91dc756  blueman-2.0.6-x86_64-1_slack14.2.txz

Slackware -current package:
75b9bd804aba2b57cb3202f145c43655  xap/blueman-2.0.6-i586-1.txz

Slackware x86_64 -current package:
e980f38b812ea25bf99bf71597c9e955  xap/blueman-2.0.6-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg blueman-2.0.6-i586-1_slack14.2.txz


+-----+