Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia 10 9 libidn Critical Out-Of-Bounds Read CVE-2026-57053

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed oras Moderate Threat Update 2026-11297-1 CVE-2026-50163

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Nginx New Moderate Update Advisory Released 2026-11295-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE gomuks Moderate Security Issue Fix 2026-11290-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Blender Moderate Security Issue Advisory 2026-11288-1

Calendar White Jul 18, 2026
moderate
Debianlts Large Esm H900
Debian LTS

Debian LTS Linux Critical Privilege Escalation and DoS Update DLA-4688-1

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE 16.0 cyrus-imapd Moderate Threats Update 2026-21368-1

Calendar White Jul 18, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Lux Important Denial of Service Issues 2026-21367-1

Calendar White Jul 18, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Grafana Important Request Limit XSS Fix 2026-21366-1

Calendar White Jul 18, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 78 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatecommand execution

SUSE: bluez Moderate Command Execution Threat CVE-2023-45866 2026:20041-1

An update that solves one vulnerability can now be installed.. # Security update for bluez Announcement ID: SUSE-SU-2026:20041-1 Release Date: 2026-01-08T15:04:11Z Rating: moderate References: * bsc#1217877 Cross-References: * CVE-2023-45866 CVSS scores: * CVE-2023-45866 ( SUSE ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2023-45866 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-547=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libbluetooth3-debuginfo-5.70-2.1 * libbluetooth3-5.70-2.1 * bluez-debugsource-5.70-2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45866.html * https://bugzilla.suse.com/show_bug.cgi?id=1217877 . Patch for CVE-2023-45866 resolves moderate keystroke injection risk in SUSE Linux Micro.. SUSE Linux, bluez, patch management, command execution, security advisory. . LinuxSecurity.com Team

Calendar%202 Jan 15, 2026 SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE: bluez Moderate Keystroke Injection Advisory SUSE-2025:03590-1

* bsc#1217877 Cross-References: * CVE-2023-45866 . # Security update for bluez Announcement ID: SUSE-SU-2025:03590-1 Release Date: 2025-10-13T12:59:08Z Rating: moderate References: * bsc#1217877 Cross-References: * CVE-2023-45866 CVSS scores: * CVE-2023-45866 ( SUSE ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2023-45866 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-3590=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * bluez-debugsource-5.13-5.45.1 * bluez-debuginfo-5.13-5.45.1 * bluez-5.13-5.45.1 * libbluetooth3-5.13-5.45.1 * bluez-devel-5.13-5.45.1 * libbluetooth3-debuginfo-5.13-5.45.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45866.html * https://bugzilla.suse.com/show_bug.cgi?id=1217877 . SUSE issue with bluez allows keystroke injection and remote command execution; patch available for vulnerabilities.. SUSE Bluez Security Moderate Keystroke Injection Patch. . LinuxSecurity.com Team

Calendar%202 Oct 13, 2025 SuSE
Banner 4 1028x280 1708121825 1771600306
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatearbitrary command execution

openSUSE: bluez Moderate Keystroke Injection Risk SUSE-SU-2025:03277-1

An update that solves one vulnerability can now be installed.. # Security update for bluez Announcement ID: SUSE-SU-2025:03277-1 Release Date: 2025-09-19T12:18:50Z Rating: moderate References: * bsc#1217877 Cross-References: * CVE-2023-45866 CVSS scores: * CVE-2023-45866 ( SUSE ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2023-45866 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-3277=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-3277=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-3277=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-3277=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-3277=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.22.1 * libbluetooth3-debuginfo-5.62-150400.4.22.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.22.1 * libbluetooth3-debuginfo-5.62-150400.4.22.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * bluez-debugsource-5.62-150400.4.22.1 *libbluetooth3-debuginfo-5.62-150400.4.22.1 * bluez-debuginfo-5.62-150400.4.22.1 * libbluetooth3-5.62-150400.4.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * bluez-debugsource-5.62-150400.4.22.1 * libbluetooth3-debuginfo-5.62-150400.4.22.1 * bluez-debuginfo-5.62-150400.4.22.1 * libbluetooth3-5.62-150400.4.22.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libbluetooth3-debuginfo-5.62-150400.4.22.1 * bluez-test-debuginfo-5.62-150400.4.22.1 * libbluetooth3-5.62-150400.4.22.1 * bluez-cups-debuginfo-5.62-150400.4.22.1 * bluez-deprecated-debuginfo-5.62-150400.4.22.1 * bluez-debugsource-5.62-150400.4.22.1 * bluez-debuginfo-5.62-150400.4.22.1 * bluez-5.62-150400.4.22.1 * bluez-cups-5.62-150400.4.22.1 * bluez-test-5.62-150400.4.22.1 * bluez-deprecated-5.62-150400.4.22.1 * bluez-devel-5.62-150400.4.22.1 * openSUSE Leap 15.4 (noarch) * bluez-auto-enable-devices-5.62-150400.4.22.1 * openSUSE Leap 15.4 (x86_64) * libbluetooth3-32bit-5.62-150400.4.22.1 * bluez-devel-32bit-5.62-150400.4.22.1 * libbluetooth3-32bit-debuginfo-5.62-150400.4.22.1 * openSUSE Leap 15.4 (aarch64_ilp32) * bluez-devel-64bit-5.62-150400.4.22.1 * libbluetooth3-64bit-5.62-150400.4.22.1 * libbluetooth3-64bit-debuginfo-5.62-150400.4.22.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45866.html * https://bugzilla.suse.com/show_bug.cgi?id=1217877 . This bulletin highlights a significant risk notification for redz, encompassing threat specifics and guidelines for patch implementation.. SUSE Linux, bluez, security fix, keystroke injection, command execution. . LinuxSecurity.com Team

Calendar%202 Sep 19, 2025 OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

DEBIAN: libjpeg Moderate Buffer Overflow Issue 2025:04523-2

* bsc#1217877 Cross-References: * CVE-2023-45866 . # Security update for bluez Announcement ID: SUSE-SU-2025:03277-1 Release Date: 2025-09-19T12:18:50Z Rating: moderate References: * bsc#1217877 Cross-References: * CVE-2023-45866 CVSS scores: * CVE-2023-45866 ( SUSE ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2023-45866 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-3277=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-3277=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-3277=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-3277=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-3277=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.22.1 * libbluetooth3-debuginfo-5.62-150400.4.22.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libbluetooth3-5.62-150400.4.22.1 * libbluetooth3-debuginfo-5.62-150400.4.22.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * bluez-debugsource-5.62-150400.4.22.1 *libbluetooth3-debuginfo-5.62-150400.4.22.1 * bluez-debuginfo-5.62-150400.4.22.1 * libbluetooth3-5.62-150400.4.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * bluez-debugsource-5.62-150400.4.22.1 * libbluetooth3-debuginfo-5.62-150400.4.22.1 * bluez-debuginfo-5.62-150400.4.22.1 * libbluetooth3-5.62-150400.4.22.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libbluetooth3-debuginfo-5.62-150400.4.22.1 * bluez-test-debuginfo-5.62-150400.4.22.1 * libbluetooth3-5.62-150400.4.22.1 * bluez-cups-debuginfo-5.62-150400.4.22.1 * bluez-deprecated-debuginfo-5.62-150400.4.22.1 * bluez-debugsource-5.62-150400.4.22.1 * bluez-debuginfo-5.62-150400.4.22.1 * bluez-5.62-150400.4.22.1 * bluez-cups-5.62-150400.4.22.1 * bluez-test-5.62-150400.4.22.1 * bluez-deprecated-5.62-150400.4.22.1 * bluez-devel-5.62-150400.4.22.1 * openSUSE Leap 15.4 (noarch) * bluez-auto-enable-devices-5.62-150400.4.22.1 * openSUSE Leap 15.4 (x86_64) * libbluetooth3-32bit-5.62-150400.4.22.1 * bluez-devel-32bit-5.62-150400.4.22.1 * libbluetooth3-32bit-debuginfo-5.62-150400.4.22.1 * openSUSE Leap 15.4 (aarch64_ilp32) * bluez-devel-64bit-5.62-150400.4.22.1 * libbluetooth3-64bit-5.62-150400.4.22.1 * libbluetooth3-64bit-debuginfo-5.62-150400.4.22.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45866.html * https://bugzilla.suse.com/show_bug.cgi?id=1217877 . Enhancement for bluez addresses CVE-2023-45866 flaw in SUSE Linux for elevated protection.. bluez security update,CVE-2023-45866,openSUSE Leap 15.4,SUSE Linux Micro security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 19, 2025 •Important SuSE
Banner 4 1028x280 1708121825 1771600306
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatearbitrary command execution

openSUSE Leap 15.5: SUSE-SU-2025:03269-1 Addresses CVE-2023-45866

An update that solves one vulnerability can now be installed.. # Security update for bluez Announcement ID: SUSE-SU-2025:03269-1 Release Date: 2025-09-18T11:09:47Z Rating: moderate References: * bsc#1217877 Cross-References: * CVE-2023-45866 CVSS scores: * CVE-2023-45866 ( SUSE ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2023-45866 ( NVD ): 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves one vulnerability can now be installed. ## Description: This update for bluez fixes the following issues: * CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-3269=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-3269=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * bluez-cups-5.65-150500.3.14.1 * bluez-debugsource-5.65-150500.3.14.1 * bluez-devel-5.65-150500.3.14.1 * libbluetooth3-debuginfo-5.65-150500.3.14.1 * bluez-5.65-150500.3.14.1 * bluez-obexd-debuginfo-5.65-150500.3.14.1 * bluez-debuginfo-5.65-150500.3.14.1 * bluez-cups-debuginfo-5.65-150500.3.14.1 * bluez-deprecated-5.65-150500.3.14.1 * libbluetooth3-5.65-150500.3.14.1 * bluez-obexd-5.65-150500.3.14.1 * bluez-deprecated-debuginfo-5.65-150500.3.14.1 * bluez-test-5.65-150500.3.14.1 * bluez-test-debuginfo-5.65-150500.3.14.1 * openSUSE Leap 15.5 (noarch) * bluez-zsh-completion-5.65-150500.3.14.1 * bluez-auto-enable-devices-5.65-150500.3.14.1 * openSUSE Leap 15.5 (x86_64) * libbluetooth3-32bit-5.65-150500.3.14.1 *bluez-devel-32bit-5.65-150500.3.14.1 * libbluetooth3-32bit-debuginfo-5.65-150500.3.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libbluetooth3-64bit-debuginfo-5.65-150500.3.14.1 * bluez-devel-64bit-5.65-150500.3.14.1 * libbluetooth3-64bit-5.65-150500.3.14.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * bluez-debugsource-5.65-150500.3.14.1 * bluez-debuginfo-5.65-150500.3.14.1 * libbluetooth3-5.65-150500.3.14.1 * libbluetooth3-debuginfo-5.65-150500.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45866.html * https://bugzilla.suse.com/show_bug.cgi?id=1217877 . Notice regarding BlueZ addressing recent keystroke injection vulnerabilities. Urgent application of patches advised to maintain system integrity and security.. openSUSE bluez patch update security. . LinuxSecurity.com Team

Calendar%202 Sep 18, 2025 OpenSUSE
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymedium severitysecurity fix

Oracle Linux 8 ELSA-2025-4043 moderate: bluez security updates

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-4043 http://linux.oracle.com/errata/ELSA-2025-4043.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: bluez-5.63-5.el8_10.x86_64.rpm bluez-cups-5.63-5.el8_10.x86_64.rpm bluez-hid2hci-5.63-5.el8_10.x86_64.rpm bluez-libs-5.63-5.el8_10.i686.rpm bluez-libs-5.63-5.el8_10.x86_64.rpm bluez-obexd-5.63-5.el8_10.x86_64.rpm bluez-libs-devel-5.63-5.el8_10.i686.rpm bluez-libs-devel-5.63-5.el8_10.x86_64.rpm aarch64: bluez-5.63-5.el8_10.aarch64.rpm bluez-cups-5.63-5.el8_10.aarch64.rpm bluez-hid2hci-5.63-5.el8_10.aarch64.rpm bluez-libs-5.63-5.el8_10.aarch64.rpm bluez-obexd-5.63-5.el8_10.aarch64.rpm bluez-libs-devel-5.63-5.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//bluez-5.63-5.el8_10.src.rpm Related CVEs: CVE-2023-27349 CVE-2023-51589 Description of changes: [5.63-5] + bluez-5.63-5 - Resolves: RHEL-35371 - Fixing CVE-2023-27349 - Resolves: RHEL-35492 - Fixing CVE-2023-51589 [5.63-4] + bluez-5.63-4 - Resolves: RHEL-35501 - Fixing CVE-2023-50230 - Resolves: RHEL-35504 - Fixing CVE-2023-50229 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . The latest rpms for Oracle Linux 8 have been enhanced with bluez patches that remediate CVE-2023-27349 and CVE-2023-51589, tackling medium-level vulnerabilities.. Oracle Linux, bluez updates, security advisory, rpm patches, Linux vulnerabilities. . LinuxSecurity.com Team

Calendar%202 Apr 25, 2025 Oracle
Banner 4 1028x280 1708121825 1771600306
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorybuffer overflowremote code execution

Mageia 2025-0115: bluez Security Advisory Updates

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. (CVE-2023-44431) BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. (CVE-2023-51580) BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read . MGASA-2025-0115 - Updated bluez packages fix security vulnerabilities Publication date: 26 Mar 2025 URL: https://advisories.mageia.org/MGASA-2025-0115.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-44431, CVE-2023-51580, CVE-2023-51589, CVE-2023-51592, CVE-2023-51594, CVE-2023-51596 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. (CVE-2023-44431) BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. (CVE-2023-51580) BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. (CVE-2023-51589) BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability. (CVE-2023-51592) BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. (CVE-2023-51594) BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. (CVE-2023-51596) References: - https://bugs.mageia.org/show_bug.cgi?id=34123 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/M6KKJVC5RPR5AMR4ZTMHWP7TATS4SY47/ - https://www.cve.org/CVERecord?id=CVE-2023-44431 - https://www.cve.org/CVERecord?id=CVE-2023-51580 - https://www.cve.org/CVERecord?id=CVE-2023-51589 - https://www.cve.org/CVERecord?id=CVE-2023-51592 - https://www.cve.org/CVERecord?id=CVE-2023-51594 - https://www.cve.org/CVERecord?id=CVE-2023-51596 SRPMS: - 9/core/bluez-5.80-1.mga9 . Mageia Security Advisory MGASA-2025-0115 addresses BlueZ vulnerabilities, including buffer overflows and information disclosure.. bluez, audio, profile, avrcp, stack-based, buffer, overflow, remote,execution, vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 26, 2025 •Important Mageia
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedorabluez

Fedora 42: libell 2025-35347bf9f0 Security Advisory Updates

bluez 5.80: Fix issue with handling address type for all types of keys. Fix issue with handling maximum number of GATT channels. Fix issue with handling MTU auto-tuning feature. Fix issue with handling AVRCP volume in reconfigured transports.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-35347bf9f0 2025-03-20 00:15:21.054436+00:00 -------------------------------------------------------------------------------- Name : libell Product : Fedora 42 Version : 0.74 Release : 1.fc42 URL : https://01.org/ell Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: bluez 5.80: Fix issue with handling address type for all types of keys. Fix issue with handling maximum number of GATT channels. Fix issue with handling MTU auto-tuning feature. Fix issue with handling AVRCP volume in reconfigured transports. Fix issue with handling VCP volume setting requests. Fix issue with handling VCP connection management. Fix issue with handling MAP qualification. Fix issue with handling PBAP qualification. Fix issue with handling BNEP qualification. Add support for PreferredBearer device property. Add support for SupportedTypes Message Access property. Add support for HFP, A2DP, AVRCP, AVCTP and MAP latest versions. iwd 3.4: Add support for the Test Anything Protocol. libell 0.74: Add support for NIST P-192 curve usage with ECDH. Add support for SHA-224 based checksums and HMACs. libell 0.73: Fix issue with parsing hwdb.bin child structures. libell 0.72: Add support for the Test Anything Protocol. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 17 2025 Peter Robinson - 0.74-1 - Update to 0.74 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2278949 - CVE-2023-51596 bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278949 [ 2 ] Bug #2278957 - CVE-2023-51594 bluez: OBEX library out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278957 [ 3 ] Bug #2278963 - CVE-2023-51592 bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278963 [ 4 ] Bug #2278966 - CVE-2023-51589 bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278966 [ 5 ] Bug #2278968 - CVE-2023-51580 bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278968 [ 6 ] Bug #2278970 - CVE-2023-44431 bluez: AVRCP stack-based buffer overflow remote code execution vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278970 [ 7 ] Bug #2344813 - iwd-3.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2344813 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-35347bf9f0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 42 security advisory updates for libell and BlueZ addressing critical vulnerabilities and fixes.. handling, bluez, address, types. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 20, 2025 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics