This bug was fixed in the package bluez - 5.54-0ubuntu1
---------------
bluez (5.54-0ubuntu1) groovy; urgency=medium
* New upstream release 5.54 (LP: #1877536)
- Fix issue with HOGP to accept data only from bonded devices.
- Fix issue with A2DP sessions being connected at the same time.
- Fix issue with class UUID matches before connecting profile.
- Add support for handling MTU auto-tuning option for AVDTP.
- Add support for new policy for Just-Works repairing.
- Add support for Enhanced ATT bearer (EATT).
* Dropped CVE-2020-0556-[1-4].patch as release 5.54 onward is not affected.
* Dropped (already unused) CVE-2017-1000250.patch as release 5.47 onward
is not affected.
-- Daniel van Vugt <[email protected]> Fri, 08 May 2020
16:28:03 +0800
** Changed in: bluez (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-
bin/cvename.cgi?name=2017-1000250
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-0556
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1877536
Title:
BlueZ 5.54 release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1877536/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
