diff options
| author | Hitendra Prajapati <hprajapati@mvista.com> | 2022-09-28 11:33:24 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-09-30 16:34:52 +0100 |
| commit | e9ad2aab5ce2b0ab4b6306d6fadd93bdfcd63ae2 (patch) | |
| tree | 8f08c5dc60712d28c8853ea9a4bf9fc91501c04c /meta/recipes-connectivity/bluez5/bluez5.inc | |
| parent | fb7acc1b214cef0aa5863daeb2fec18759791476 (diff) | |
| download | poky-e9ad2aab5ce2b0ab4b6306d6fadd93bdfcd63ae2.tar.gz | |
bluez: CVE-2022-39176 BlueZ allows physically proximate attackers
Source: https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1977968
MR: 122140
Type: Security Fix
Disposition: Backport from https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.6
ChangeID: b989c7670a9b2bd1d11221e981eab0d162f3271c
Description:
CVE-2022-39176 bluez: BlueZ allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.
Affects "bluez < 5.59"
(From OE-Core rev: 3750b576035d87633c69c0a5fc6de4854179f9b0)
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/bluez5/bluez5.inc')
| -rw-r--r-- | meta/recipes-connectivity/bluez5/bluez5.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/bluez5/bluez5.inc b/meta/recipes-connectivity/bluez5/bluez5.inc index 4d4348898a..eaac9ee849 100644 --- a/meta/recipes-connectivity/bluez5/bluez5.inc +++ b/meta/recipes-connectivity/bluez5/bluez5.inc | |||
| @@ -56,6 +56,7 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/bluetooth/bluez-${PV}.tar.xz \ | |||
| 56 | file://CVE-2021-3588.patch \ | 56 | file://CVE-2021-3588.patch \ |
| 57 | file://CVE-2021-3658.patch \ | 57 | file://CVE-2021-3658.patch \ |
| 58 | file://CVE-2022-0204.patch \ | 58 | file://CVE-2022-0204.patch \ |
| 59 | file://CVE-2022-39176.patch \ | ||
| 59 | " | 60 | " |
| 60 | S = "${WORKDIR}/bluez-${PV}" | 61 | S = "${WORKDIR}/bluez-${PV}" |
| 61 | 62 | ||