Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Ubuntu 20.10 & 20.04 LTS: USN-4605-2 Blueman Update for Security Issues

ubuntu
Calendar Grey November 2, 2020
Dist Ubuntu Esm H88
Enhancements to network configuration in Fedora target vulnerabilities and bolster user privacy protections significantly.
A security improvement has been made to blueman.

Summary

A security improvement has been made to blueman.

Software Description:

- blueman: Graphical bluetooth manager

Details:

Vaisha Bernard discovered that blueman did not properly sanitize input

on the d-bus interface to blueman-mechanism. A local attacker could

possibly use this issue to escalate privileges and run arbitrary code or

cause a denial of service. (CVE-2020-15238)

While a previous security update fixed the issue, this update provides

additional improvements by enabling PolicyKit authentication for

privileged commands.

Topics%20covered

Topics Covered

security advisory denial of service software update local attack ubuntu blueman

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  blueman                         2.1.3-2ubuntu1.1

Ubuntu 20.04 LTS:
  blueman                         2.1.2-1ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4605-1

https://bugs.launchpad.net/ubuntu/+source/blueman/+bug/1897287

Severity
important
Lowest
Low
Medium
High
Critical

November 03, 2020

Topics%20covered

Topics Covered

security advisory denial of service software update local attack ubuntu blueman

Package Information

https://launchpad.net/ubuntu/+source/blueman/2.1.3-2ubuntu1.1
https://launchpad.net/ubuntu/+source/blueman/2.1.2-1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here