=========================================================================Ubuntu Security Notice USN-3856-1
January 14, 2019

gnome-bluetooth vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

GNOME Bluetooth could allow unintended access to devices.

Software Description:
- gnome-bluetooth: GNOME Bluetooth tools

Details:

Chris Marchesi discovered that BlueZ incorrectly handled disabling
Bluetooth visibility. A remote attacker could possibly pair to devices,
contrary to expectations. This update adds a workaround to GNOME Bluetooth
to fix the issue.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  gnome-bluetooth                 3.28.0-2ubuntu0.1
  libgnome-bluetooth13            3.28.0-2ubuntu0.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-3856-1
  CVE-2018-10910

Package Information:
  https://launchpad.net/ubuntu/+source/gnome-bluetooth/3.28.0-2ubuntu0.1

Ubuntu 3856-1: GNOME Bluetooth vulnerability

January 14, 2019
GNOME Bluetooth could allow unintended access to devices.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: gnome-bluetooth 3.28.0-2ubuntu0.1 libgnome-bluetooth13 3.28.0-2ubuntu0.1 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3856-1

CVE-2018-10910

Severity
January 14, 2019

Package Information

https://launchpad.net/ubuntu/+source/gnome-bluetooth/3.28.0-2ubuntu0.1

Related News