Slackware: 2018-213-01 Moderate: Blueman Authentication Issue Fix
slackware
August 2, 2018
New blueman packages are available for Slackware 14.2 and -current to fix a security issue
Summary
Here are the details from the Slackware 14.2 ChangeLog: patches/packages/blueman-2.0.6-i586-1_slack14.2.txz: Upgraded. This update fixes an issue where blueman-mechanism did not enforce the polkit action 'org.blueman.network.setup' for which a polkit policy is shipped. This meant that any user with access to the D-Bus system bus was able to access the related API without authentication. The result was an unspecified impact on the networking stack. Thanks to Matthias Gerstner for discovering this issue. (* Security fix *)
Where Find New Packages
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:
MD5 Signatures
Slackware 14.2 package:
408e8b08dd6014d6768cfba739940bd5 blueman-2.0.6-i586-1_slack14.2.txz
Slackware x86_64 14.2 package:
4f3ac84da15d5e60b31da00cf91dc756 blueman-2.0.6-x86_64-1_slack14.2.txz
Slackware -current package:
75b9bd804aba2b57cb3202f145c43655 xap/blueman-2.0.6-i586-1.txz
Slackware x86_64 -current package:
e980f38b812ea25bf99bf71597c9e955 xap/blueman-2.0.6-x86_64-1.txz
PREVIOUS
NEXT
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg blueman-2.0.6-i586-1_slack14.2.txz
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!