Security update for bluez
This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708). - CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712). - CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171). This update was imported from the SUSE:SLE-15:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708). - CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712). - CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171). This update was imported from the SUSE:SLE-15:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1013708
- https://bugzilla.suse.com/1013712
- https://bugzilla.suse.com/1013893
- https://bugzilla.suse.com/1015171
- https://lists.opensuse.org/archives/list/[email protected]/thread/XZHD5VUMX7KIQPDT63RDBFNM2PUTFJEL/#XZHD5VUMX7KIQPDT63RDBFNM2PUTFJEL
- https://www.suse.com/security/cve/CVE-2016-9797
- https://www.suse.com/security/cve/CVE-2016-9798
- https://www.suse.com/security/cve/CVE-2016-9802
- https://www.suse.com/security/cve/CVE-2016-9917