[bluez] [Security] information disclosure (CVE-2017-1000250)

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Attached to Project: Arch Linux
Opened by Levente Polyak (anthraxx) - Tuesday, 12 September 2017, 18:53 GMT
Last edited by Levente Polyak (anthraxx) - Tuesday, 12 September 2017, 21:31 GMT

Task Type	Bug Report
Category	Security
Status	Closed
Assigned To	Andreas Radke (AndyRTR) Tom Gundersen (tomegun) Levente Polyak (anthraxx)
Architecture	All
Severity	High
Priority	Normal
Reported Version
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	0
Private	No

Summary
=======

The package bluez is vulnerable to information disclosure via CVE-2017-1000250.

Guidance
========

Attached patches should be applied and an update released to mitigate this issue.

References
==========

This task depends upon

Closed by Levente Polyak (anthraxx)
Tuesday, 12 September 2017, 21:31 GMT
Reason for closing: Fixed
Additional comments about closing: 5.46-2