[ubuntu/impish-updates] bluez 5.60-0ubuntu2.2 (Accepted)

Tue Feb 8 03:28:19 UTC 2022

bluez (5.60-0ubuntu2.2) impish-security; urgency=medium

  * SECURITY UPDATE: Integer overflow in gatt server protocol could lead to
    a heap overflow, resulting in denial of service or potential code
    execution.
    - debian/patches/CVE-2022-0204.patch: add length and offset validation in
      write_cb function in src/shared/gatt-server.c.
    - CVE-2022-0204

Date: 2022-02-03 10:51:10.281849+00:00
Changed-By: Ray Veldkamp <ray.veldkamp at canonical.com>
Maintainer: Bluetooth <ubuntu-bluetooth at lists.ubuntu.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/bluez/5.60-0ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.