bluez: The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig,...
CVE-2020-26558 is fixed in 10 products on 1 platform, first by bluetooth 5.48-0ubuntu3.5, released June 8, 2021. It is not reported as exploited. Patch Radar priority: Routine.
The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Red Hat), and pcmcia configuration files. Security Fix(es): * bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack (CVE-2020-26558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bluetooth · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | bluetooth 5.48-0ubuntu3.5 | Jun 8, 2021 |
| bluetooth · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | bluetooth 5.53-0ubuntu3.2 | Jun 9, 2021 |
| bluez · RHEL 8 | 0:5.56-1.el8 | RHSA-2021:4432 | Nov 9, 2021 |
| bluez · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | bluez 5.48-0ubuntu3.5 | Jun 8, 2021 |
| bluez · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | bluez 5.53-0ubuntu3.2 | Jun 9, 2021 |
| bluez · ol 8 | 0:5.56-1.el8 | ELSA-2021-4432 | Nov 24, 2021 |
| bluez-cups · RHEL 8 | 0:5.56-1.el8 | RHSA-2021:4432 | Nov 9, 2021 |
| bluez-cups · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | bluez-cups 5.48-0ubuntu3.5 | Jun 8, 2021 |
| bluez-cups · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | bluez-cups 5.53-0ubuntu3.2 | Jun 9, 2021 |
| bluez-cups · ol 8 | 0:5.56-1.el8 | ELSA-2021-4432 | Nov 24, 2021 |
| bluez-hcidump · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | bluez-hcidump 5.48-0ubuntu3.5 | Jun 8, 2021 |
| bluez-hcidump · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | bluez-hcidump 5.53-0ubuntu3.2 | Jun 9, 2021 |
| bluez-hid2hci · RHEL 8 | 0:5.56-1.el8 | RHSA-2021:4432 | Nov 9, 2021 |
| bluez-hid2hci · ol 8 | 0:5.56-1.el8 | ELSA-2021-4432 | Nov 24, 2021 |
| bluez-libs · RHEL 8 | 0:5.56-1.el8 | RHSA-2021:4432 | Nov 9, 2021 |
| bluez-libs · ol 8 | 0:5.56-1.el8 | ELSA-2021-4432 | Nov 24, 2021 |
| bluez-libs-devel · RHEL 8 | 0:5.56-1.el8 | RHSA-2021:4432 | Nov 9, 2021 |
| bluez-libs-devel · ol 8 | 0:5.56-1.el8 | ELSA-2021-4432 | Nov 24, 2021 |
| bluez-obexd · RHEL 8 | 0:5.56-1.el8 | RHSA-2021:4432 | Nov 9, 2021 |
| bluez-obexd · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | bluez-obexd 5.48-0ubuntu3.5 | Jun 8, 2021 |
| bluez-obexd · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | bluez-obexd 5.53-0ubuntu3.2 | Jun 9, 2021 |
| bluez-obexd · ol 8 | 0:5.56-1.el8 | ELSA-2021-4432 | Nov 24, 2021 |
| bluez-tests · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | bluez-tests 5.48-0ubuntu3.5 | Jun 8, 2021 |
| bluez-tests · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | bluez-tests 5.53-0ubuntu3.2 | Jun 9, 2021 |
| libbluetooth3 · Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | libbluetooth3 5.48-0ubuntu3.5 | Jun 8, 2021 |
| libbluetooth3 · Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | libbluetooth3 5.53-0ubuntu3.2 | Jun 9, 2021 |