diff options
| author | Ross Burton <ross.burton@intel.com> | 2017-09-13 20:11:52 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-09-14 11:35:46 +0100 |
| commit | 9376bbc8a04ced3c0973805e6cb2529b6db03076 (patch) | |
| tree | 4513d005c0ee69c1f987f6856e8015eecd121e82 /meta/recipes-connectivity/bluez5/bluez5.inc | |
| parent | 41c51dc28e881f8a12c62725a4d823db804a5cb1 (diff) | |
| download | poky-9376bbc8a04ced3c0973805e6cb2529b6db03076.tar.gz | |
bluez5: fix out-of-bounds access in SDP server (CVE-2017-1000250)
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an
information disclosure vulnerability which allows remote attackers to obtain
sensitive information from the bluetoothd process memory. This vulnerability
lies in the processing of SDP search attribute requests.
(From OE-Core rev: 7351e0b260876b9bbc8660c2bb4173ab4c130f8b)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-connectivity/bluez5/bluez5.inc')
| -rw-r--r-- | meta/recipes-connectivity/bluez5/bluez5.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/bluez5/bluez5.inc b/meta/recipes-connectivity/bluez5/bluez5.inc index 527e4033fe..2ae4553d48 100644 --- a/meta/recipes-connectivity/bluez5/bluez5.inc +++ b/meta/recipes-connectivity/bluez5/bluez5.inc | |||
| @@ -50,6 +50,7 @@ SRC_URI = "\ | |||
| 50 | ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', '', 'file://0001-Allow-using-obexd-without-systemd-in-the-user-sessio.patch', d)} \ | 50 | ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', '', 'file://0001-Allow-using-obexd-without-systemd-in-the-user-sessio.patch', d)} \ |
| 51 | file://0001-tests-add-a-target-for-building-tests-without-runnin.patch \ | 51 | file://0001-tests-add-a-target-for-building-tests-without-runnin.patch \ |
| 52 | file://0001-hciattach-bcm43xx-fix-the-delay-timer-for-firmware-d.patch \ | 52 | file://0001-hciattach-bcm43xx-fix-the-delay-timer-for-firmware-d.patch \ |
| 53 | file://cve-2017-1000250.patch \ | ||
| 53 | " | 54 | " |
| 54 | S = "${WORKDIR}/bluez-${PV}" | 55 | S = "${WORKDIR}/bluez-${PV}" |
| 55 | 56 | ||