[Git][security-tracker-team/security-tracker][master] BlueMirror mesh provisioning issues are in bluez not linux
Ben Hutchings (@benh)
gitlab at salsa.debian.org
Fri Feb 25 02:34:26 GMT 2022
Ben Hutchings pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f17b1f8a by Ben Hutchings at 2022-02-25T03:29:07+01:00
BlueMirror mesh provisioning issues are in bluez not linux
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -97669,12 +97669,12 @@ CVE-2020-26562
CVE-2020-26561 (** UNSUPPORTED WHEN ASSIGNED ** Belkin LINKSYS WRT160NL 1.0.04.002_US_ ...)
NOT-FOR-US: Belkin
CVE-2020-26560 (Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0. ...)
- - linux <unfixed>
+ - bluez <unfixed>
NOTE: https://kb.cert.org/vuls/id/799380
NOTE: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/impersonation-mesh/
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1959994
CVE-2020-26559 (Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0. ...)
- - linux <unfixed>
+ - bluez <unfixed>
NOTE: https://kb.cert.org/vuls/id/799380
NOTE: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/authvalue-leak/
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1960011
@@ -97690,12 +97690,12 @@ CVE-2020-26558 (Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specifi
NOTE: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html
NOTE: https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=00da0fb4972cf59e1c075f313da81ea549cb8738
CVE-2020-26557 (Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may perm ...)
- - linux <unfixed>
+ - bluez <unfixed>
NOTE: https://kb.cert.org/vuls/id/799380
NOTE: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/predicatable-authvalue/
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1960009
CVE-2020-26556 (Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may perm ...)
- - linux <unfixed>
+ - bluez <unfixed>
NOTE: https://kb.cert.org/vuls/id/799380
NOTE: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/malleable/
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1960012
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f17b1f8ac0e7935cfa73e2191763be2f8bb5bad6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f17b1f8ac0e7935cfa73e2191763be2f8bb5bad6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220225/4e1d9674/attachment.htm>
More information about the debian-security-tracker-commits
mailing list