Security
Security
Multiple vulnerabilities have been discovered in Bluez, the worst of which can lead to privilege escalation.
| Package | net-wireless/bluez on all architectures |
|---|---|
| Affected versions | < 5.70-r1 |
| Unaffected versions | >= 5.70-r1 |
BlueZ is the canonical bluetooth tools and system daemons package for Linux.
Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details.
An attacker may inject unauthenticated keystrokes via Bluetooth, leading to privilege escalation or denial of service.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.70-r1"
Release date
January 05, 2024
Latest revision
January 05, 2024: 1
Severity
high
Exploitable
remote
Bugzilla entries