-
bluez (4.101-0ubuntu13.3) trusty-security; urgency=medium
* SECURITY UPDATE: information disclosure in service discovery
protocol daemon.
- debian/patches/CVE-2017-1000250.patch: validate continuation
request size before sending response.
- CVE-2017-1000250
* SECURITY UPDATE: buffer overflow in command line tools
- debian/patches/CVE-2016-7837.patch: ensure write does not go past
end of array.
- CVE-2016-7837
-- Steve Beattie <email address hidden> Mon, 11 Sep 2017 18:53:46 -0700
-
bluez (4.101-0ubuntu13.1) trusty-proposed; urgency=medium
* Add ssp parameter fix, add a missing parameter entered in agent dbus API.
Fixed Logitech Bluetooth Keyboard K760, Logitech Bluetooth Keyboard K810,
HP Bluetooth Keyboard K4000 secure simple pairing failed issue.
(LP: #1035431)
backported bluez5 commits:
upstream commit 546fee067daedc2b7860481aeaebd1771d192dfb
mgmt: Implement support for Passkey Notify event
upstream commit 97b930870dcd016b9cdd612e47b832736b4d0c5d
core: Refactor authentication handling
upstream commit e86fe268c77017731b792296eea16206918f1852
agent: Add missing parameter to DisplayPasskey
upstream commit 6a394b2c7f19b53b630bef2e865f9bc289d4b75c
agent-api: DisplayPasskey: D-Bus doesn't have a uint8 type
-- Jian-Ding Chen (timchen119) <email address hidden> Thu, 04 Sep 2014 13:34:39 -0400
-
bluez (4.101-0ubuntu13) trusty; urgency=medium
* debian/rules: Disable pnat, it shouldn't have been compiled in the first
place; since it's only really useful on Maemo. (LP: #1280584)
-- Mathieu Trudel-Lapierre <email address hidden> Thu, 10 Apr 2014 16:10:13 -0400
-
bluez (4.101-0ubuntu12) trusty; urgency=low
* debian/patches/13_reset_default_adapter_id.patch: Reset default_adapter_id
when there is no adapter. (LP: #1303819)
-- Shih-Yuan Lee (FourDollars) <email address hidden> Tue, 08 Apr 2014 10:54:11 +0800
-
bluez (4.101-0ubuntu11) trusty; urgency=low
* debian/patches/12_check_device_before_removing_from_devices.patch:
The power of some Bluetooth device will be cut and the device will be
removed from the devices list when suspending, so it has to check if
the device still exists in the devices list. (LP: #1300623)
-- Shih-Yuan Lee (FourDollars) <email address hidden> Wed, 02 Apr 2014 23:53:58 -0400
-
bluez (4.101-0ubuntu10) trusty; urgency=low
* debian/patches/telephony_ofono_add_watch.patch: fix telephony-ofono code
to have the add_watch function not be conditioned out, since it's used.
* debian/rules: explicitly specify to use ofono a the telephony service.
* debian/bluez.dirs: add /var/lib/bluetooth, we need to have it created
on Ubuntu Touch so that discovery writes cache data for classes, seen
addresses, etc. (LP: #1234361)
-- Mathieu Trudel-Lapierre <email address hidden> Thu, 19 Dec 2013 21:36:00 -0500
-
bluez (4.101-0ubuntu9) trusty; urgency=medium
* Use dh-autoreconf for current libtool.
-- Steve Langasek <email address hidden> Mon, 16 Dec 2013 01:20:58 -0800
-
bluez (4.101-0ubuntu8b1) raring; urgency=low
* No-change rebuild against libudev1
-- Martin Pitt <email address hidden> Wed, 13 Mar 2013 06:59:51 +0000
