Synopsis:          Moderate: bluez security update
Advisory ID:       SLSA-2017:2685-1
Issue Date:        2017-09-12
CVE Numbers:       CVE-2017-1000250
--

Security Fix(es):

* An information-disclosure flaw was found in the bluetoothd
implementation of the Service Discovery Protocol (SDP). A specially
crafted Bluetooth device could, without prior pairing or user
interaction, retrieve portions of the bluetoothd process memory,
including potentially sensitive information such as Bluetooth encryption
keys. (CVE-2017-1000250)
--

SL6
  x86_64
    bluez-4.66-2.el6_9.x86_64.rpm
    bluez-libs-4.66-2.el6_9.x86_64.rpm
    bluez-alsa-4.66-2.el6_9.x86_64.rpm
    bluez-compat-4.66-2.el6_9.x86_64.rpm
    bluez-cups-4.66-2.el6_9.x86_64.rpm
    bluez-gstreamer-4.66-2.el6_9.x86_64.rpm
    bluez-libs-devel-4.66-2.el6_9.x86_64.rpm
    bluez-libs-4.66-2.el6_9.i686.rpm
  i386
    bluez-alsa-4.66-2.el6_9.i686.rpm
    bluez-compat-4.66-2.el6_9.i686.rpm
    bluez-cups-4.66-2.el6_9.i686.rpm
    bluez-gstreamer-4.66-2.el6_9.i686.rpm
    bluez-libs-devel-4.66-2.el6_9.i686.rpm
    bluez-4.66-2.el6_9.i686.rpm
    bluez-libs-4.66-2.el6_9.i686.rpm
    bluez-debuginfo-4.66-2.el6_9.i686.rpm
SL7
  x86_64
    bluez-libs-devel-5.44-4.el7_4.x86_64.rpm
    bluez-libs-devel-5.44-4.el7_4.i686.rpm
    bluez-cups-5.44-4.el7_4.x86_64.rpm
    bluez-hid2hci-5.44-4.el7_4.x86_64.rpm
    bluez-5.44-4.el7_4.x86_64.rpm
    bluez-libs-5.44-4.el7_4.i686.rpm
    bluez-libs-5.44-4.el7_4.x86_64.rpm

- Scientific Linux Development Team