And it seems to be in bionic too:
gnome-bluetooth (3.28.0-2ubuntu0.1) bionic-security; urgency=medium
* SECURITY UPDATE: work around bluetoothd discoverability issue
- debian/patches/CVE-2018-10910.patch: fix Discoverable being reset
when turned off in lib/bluetooth-client.c.
- CVE-2018-10910
-- Marc Deslauriers <[email protected]> Fri, 11 Jan 2019
14:41:45 -0500
** Changed in: gnome-bluetooth (Ubuntu Bionic)
Status: New => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-bluetooth in Ubuntu.
https://bugs.launchpad.net/bugs/1791405
Title:
bluetooth always in discoverable mode (security issue)
Status in bluez package in Ubuntu:
New
Status in gnome-bluetooth package in Ubuntu:
Fix Released
Status in bluez source package in Bionic:
New
Status in gnome-bluetooth source package in Bionic:
Fix Released
Status in bluez source package in Cosmic:
New
Status in gnome-bluetooth source package in Cosmic:
Fix Released
Status in bluez source package in Disco:
New
Status in gnome-bluetooth source package in Disco:
Fix Released
Status in bluez source package in EE-Series:
Fix Committed
Status in gnome-bluetooth package in Fedora:
Confirmed
Bug description:
Excerpt from a similar report
(https://bugzilla.redhat.com/show_bug.cgi?id=1602985) :
Opening the Bluetooth settings will make the device discoverable
again, but does not make the device undiscoverable after the settings
are closed (this is not intended behavior; devices should only be
discoverable when the bluetooth settings UI is open).
There seem to be a merge request :
https://gitlab.gnome.org/GNOME/gnome-bluetooth/merge_requests/1
Could you please merge it asap, it should be treated as a security
issue IMHO.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1791405/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
