diff options
| author | Hitendra Prajapati <hprajapati@mvista.com> | 2022-09-28 11:33:24 +0530 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-09-30 16:34:52 +0100 |
| commit | e9ad2aab5ce2b0ab4b6306d6fadd93bdfcd63ae2 (patch) | |
| tree | 8f08c5dc60712d28c8853ea9a4bf9fc91501c04c /scripts/lib/recipetool/create_kernel.py | |
| parent | fb7acc1b214cef0aa5863daeb2fec18759791476 (diff) | |
| download | poky-e9ad2aab5ce2b0ab4b6306d6fadd93bdfcd63ae2.tar.gz | |
bluez: CVE-2022-39176 BlueZ allows physically proximate attackers
Source: https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1977968
MR: 122140
Type: Security Fix
Disposition: Backport from https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.6
ChangeID: b989c7670a9b2bd1d11221e981eab0d162f3271c
Description:
CVE-2022-39176 bluez: BlueZ allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.
Affects "bluez < 5.59"
(From OE-Core rev: 3750b576035d87633c69c0a5fc6de4854179f9b0)
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/recipetool/create_kernel.py')
0 files changed, 0 insertions, 0 deletions