ALAS2023-2023-212


Amazon Linux 2023 Security Advisory: ALAS-2023-212
Advisory Release Date: 2023-06-07 23:52 Pacific
Advisory Updated Date: 2023-06-12 23:40 Pacific
Severity: Medium

Issue Overview:

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service. (CVE-2022-0204)


Affected Packages:

bluez


Issue Correction:
Run dnf update bluez --releasever 2023.0.20230614 to update your system.

New Packages:
aarch64:
    bluez-hid2hci-5.62-2.amzn2023.0.3.aarch64
    bluez-cups-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-cups-5.62-2.amzn2023.0.3.aarch64
    bluez-deprecated-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-libs-devel-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-libs-5.62-2.amzn2023.0.3.aarch64
    bluez-obexd-5.62-2.amzn2023.0.3.aarch64
    bluez-obexd-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-mesh-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-debugsource-5.62-2.amzn2023.0.3.aarch64
    bluez-mesh-5.62-2.amzn2023.0.3.aarch64
    bluez-libs-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-deprecated-5.62-2.amzn2023.0.3.aarch64
    bluez-hid2hci-debuginfo-5.62-2.amzn2023.0.3.aarch64
    bluez-5.62-2.amzn2023.0.3.aarch64
    bluez-libs-devel-5.62-2.amzn2023.0.3.aarch64

src:
    bluez-5.62-2.amzn2023.0.3.src

x86_64:
    bluez-obexd-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-mesh-5.62-2.amzn2023.0.3.x86_64
    bluez-cups-5.62-2.amzn2023.0.3.x86_64
    bluez-deprecated-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-deprecated-5.62-2.amzn2023.0.3.x86_64
    bluez-cups-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-libs-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-hid2hci-5.62-2.amzn2023.0.3.x86_64
    bluez-libs-5.62-2.amzn2023.0.3.x86_64
    bluez-libs-devel-5.62-2.amzn2023.0.3.x86_64
    bluez-hid2hci-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-mesh-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-libs-devel-debuginfo-5.62-2.amzn2023.0.3.x86_64
    bluez-5.62-2.amzn2023.0.3.x86_64
    bluez-obexd-5.62-2.amzn2023.0.3.x86_64
    bluez-debugsource-5.62-2.amzn2023.0.3.x86_64