Package: bluez Version: 5.87-1 Severity: normal Tags: upstream patch 5.87 introduced a regression about discovery with a UUID [service] filter -- the upstream source passes the UUID string as the filter function parameter, which causes SIGSEGV/crash when the string (on the heap) is attempted to be executed; this is due to the function type being 'void *', which thereby allows this situation to satisfy compile time type enforcement.
A fix has been applied to upstream development, but it's not clear when 5.88 will be released, so requesting this be patched in Debian. The patch is available here: https://git.kernel.org/pub/scm/bluetooth/bluez.git/patch/?id=82af2beafc39510e2c4a439bf44faea711d6503f The upstream commit forming the patch is here: https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=82af2beafc39510e2c4a439bf44faea711d6503f The bug report about the issue is here: https://github.com/bluez/bluez/issues/2282 Thank you for your attention to this matter. -- System Information: Distributor ID: Devuan Description: Devuan GNU/Linux 7 (freia/ceres) Release: 7 Codename: freia ceres Architecture: x86_64 Kernel: Linux 7.1.8+deb14-amd64 (SMP w/16 CPU threads; PREEMPT) Kernel taint flags: TAINT_USER Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages bluez depends on: ii adduser 3.158 ii dbus [default-dbus-system-bus] 1.16.2-5devuan1+b1 ii eudev [udev] 3.2.14-4 ii init-system-helpers 1.69devuan1 ii kmod 34.2-2+b2 ii libasound2t64 1.2.16.1-1 ii libc6 2.43-3 ii libdbus-1-3 1.16.2-5devuan1+b1 ii libdw1t64 0.195-1 ii libeudev1 [libudev1] 3.2.14-4 ii libglib2.0-0t64 2.88.3-3 ii libreadline8t64 8.3-4 bluez recommends no packages. Versions of packages bluez suggests: pn pulseaudio-module-bluetooth <none> -- no debconf information
