OESA-2023-1948

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1948
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1948.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1948
Upstream
Published
2023-12-22T11:06:32Z
Modified
2025-08-12T05:22:58.080126Z
Summary
bluez security update
Details

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.

Security Fix(es):

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.(CVE-2023-45866)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1

bluez

Package

Name
bluez
Purl
pkg:rpm/openEuler/bluez&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.54-13.oe1

Ecosystem specific 

{
    "x86_64": [
        "bluez-libs-5.54-13.oe1.x86_64.rpm",
        "bluez-devel-5.54-13.oe1.x86_64.rpm",
        "bluez-cups-5.54-13.oe1.x86_64.rpm",
        "bluez-debugsource-5.54-13.oe1.x86_64.rpm",
        "bluez-debuginfo-5.54-13.oe1.x86_64.rpm",
        "bluez-5.54-13.oe1.x86_64.rpm"
    ],
    "noarch": [
        "bluez-help-5.54-13.oe1.noarch.rpm"
    ],
    "aarch64": [
        "bluez-5.54-13.oe1.aarch64.rpm",
        "bluez-devel-5.54-13.oe1.aarch64.rpm",
        "bluez-cups-5.54-13.oe1.aarch64.rpm",
        "bluez-debugsource-5.54-13.oe1.aarch64.rpm",
        "bluez-libs-5.54-13.oe1.aarch64.rpm",
        "bluez-debuginfo-5.54-13.oe1.aarch64.rpm"
    ],
    "src": [
        "bluez-5.54-13.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP3

bluez

Package

Name
bluez
Purl
pkg:rpm/openEuler/bluez&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.54-13.oe1

Ecosystem specific 

{
    "x86_64": [
        "bluez-cups-5.54-13.oe1.x86_64.rpm",
        "bluez-debuginfo-5.54-13.oe1.x86_64.rpm",
        "bluez-debugsource-5.54-13.oe1.x86_64.rpm",
        "bluez-libs-5.54-13.oe1.x86_64.rpm",
        "bluez-5.54-13.oe1.x86_64.rpm",
        "bluez-devel-5.54-13.oe1.x86_64.rpm"
    ],
    "noarch": [
        "bluez-help-5.54-13.oe1.noarch.rpm"
    ],
    "aarch64": [
        "bluez-debugsource-5.54-13.oe1.aarch64.rpm",
        "bluez-devel-5.54-13.oe1.aarch64.rpm",
        "bluez-libs-5.54-13.oe1.aarch64.rpm",
        "bluez-5.54-13.oe1.aarch64.rpm",
        "bluez-cups-5.54-13.oe1.aarch64.rpm",
        "bluez-debuginfo-5.54-13.oe1.aarch64.rpm"
    ],
    "src": [
        "bluez-5.54-13.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP4

bluez

Package

Name
bluez
Purl
pkg:rpm/openEuler/bluez&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.54-13.oe2003sp4

Ecosystem specific 

{
    "x86_64": [
        "bluez-debugsource-5.54-13.oe2003sp4.x86_64.rpm",
        "bluez-devel-5.54-13.oe2003sp4.x86_64.rpm",
        "bluez-debuginfo-5.54-13.oe2003sp4.x86_64.rpm",
        "bluez-libs-5.54-13.oe2003sp4.x86_64.rpm",
        "bluez-cups-5.54-13.oe2003sp4.x86_64.rpm",
        "bluez-5.54-13.oe2003sp4.x86_64.rpm"
    ],
    "noarch": [
        "bluez-help-5.54-13.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "bluez-libs-5.54-13.oe2003sp4.aarch64.rpm",
        "bluez-debuginfo-5.54-13.oe2003sp4.aarch64.rpm",
        "bluez-cups-5.54-13.oe2003sp4.aarch64.rpm",
        "bluez-5.54-13.oe2003sp4.aarch64.rpm",
        "bluez-devel-5.54-13.oe2003sp4.aarch64.rpm",
        "bluez-debugsource-5.54-13.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "bluez-5.54-13.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS

bluez

Package

Name
bluez
Purl
pkg:rpm/openEuler/bluez&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.54-18.oe2203sp2

Ecosystem specific 

{
    "x86_64": [
        "bluez-debuginfo-5.54-18.oe2203.x86_64.rpm",
        "bluez-devel-5.54-18.oe2203.x86_64.rpm",
        "bluez-libs-5.54-18.oe2203.x86_64.rpm",
        "bluez-5.54-18.oe2203.x86_64.rpm",
        "bluez-cups-5.54-18.oe2203.x86_64.rpm",
        "bluez-debugsource-5.54-18.oe2203.x86_64.rpm",
        "bluez-devel-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-libs-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-cups-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-libs-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-devel-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-cups-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp2.x86_64.rpm"
    ],
    "noarch": [
        "bluez-help-5.54-18.oe2203.noarch.rpm",
        "bluez-help-5.54-18.oe2203sp1.noarch.rpm",
        "bluez-help-5.54-18.oe2203sp2.noarch.rpm"
    ],
    "aarch64": [
        "bluez-5.54-18.oe2203.aarch64.rpm",
        "bluez-devel-5.54-18.oe2203.aarch64.rpm",
        "bluez-cups-5.54-18.oe2203.aarch64.rpm",
        "bluez-debuginfo-5.54-18.oe2203.aarch64.rpm",
        "bluez-debugsource-5.54-18.oe2203.aarch64.rpm",
        "bluez-libs-5.54-18.oe2203.aarch64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-devel-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-libs-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-cups-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-devel-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-cups-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-libs-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-5.54-18.oe2203sp2.aarch64.rpm"
    ],
    "src": [
        "bluez-5.54-18.oe2203.src.rpm",
        "bluez-5.54-18.oe2203sp1.src.rpm",
        "bluez-5.54-18.oe2203sp2.src.rpm"
    ]
}

openEuler:22.03-LTS-SP1

bluez

Package

Name
bluez
Purl
pkg:rpm/openEuler/bluez&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.54-18.oe2203sp1

Ecosystem specific 

{
    "x86_64": [
        "bluez-devel-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-libs-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-cups-5.54-18.oe2203sp1.x86_64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp1.x86_64.rpm"
    ],
    "noarch": [
        "bluez-help-5.54-18.oe2203sp1.noarch.rpm"
    ],
    "aarch64": [
        "bluez-debuginfo-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-devel-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-libs-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-cups-5.54-18.oe2203sp1.aarch64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp1.aarch64.rpm"
    ],
    "src": [
        "bluez-5.54-18.oe2203sp1.src.rpm"
    ]
}

openEuler:22.03-LTS-SP2

bluez

Package

Name
bluez
Purl
pkg:rpm/openEuler/bluez&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.54-18.oe2203sp2

Ecosystem specific 

{
    "x86_64": [
        "bluez-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-libs-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-devel-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-cups-5.54-18.oe2203sp2.x86_64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp2.x86_64.rpm"
    ],
    "noarch": [
        "bluez-help-5.54-18.oe2203sp2.noarch.rpm"
    ],
    "aarch64": [
        "bluez-devel-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-debugsource-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-debuginfo-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-cups-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-libs-5.54-18.oe2203sp2.aarch64.rpm",
        "bluez-5.54-18.oe2203sp2.aarch64.rpm"
    ],
    "src": [
        "bluez-5.54-18.oe2203sp2.src.rpm"
    ]
}