bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "libbluetooth3": "5.53-0ubuntu3.4", "bluetooth": "5.53-0ubuntu3.4", "bluez-hcidump": "5.53-0ubuntu3.4", "bluez-cups": "5.53-0ubuntu3.4", "bluez-tests": "5.53-0ubuntu3.4", "libbluetooth3-dbg": "5.53-0ubuntu3.4", "bluez-dbg": "5.53-0ubuntu3.4", "libbluetooth-dev": "5.53-0ubuntu3.4", "bluez": "5.53-0ubuntu3.4", "bluez-obexd": "5.53-0ubuntu3.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "libbluetooth3": "5.62-0ubuntu1", "bluez-dbgsym": "5.62-0ubuntu1", "bluez-hcidump": "5.62-0ubuntu1", "bluez-hcidump-dbgsym": "5.62-0ubuntu1", "bluez-obexd-dbgsym": "5.62-0ubuntu1", "bluez-meshd-dbgsym": "5.62-0ubuntu1", "bluez-cups-dbgsym": "5.62-0ubuntu1", "libbluetooth-dev": "5.62-0ubuntu1", "bluez-meshd": "5.62-0ubuntu1", "bluetooth": "5.62-0ubuntu1", "libbluetooth3-dbgsym": "5.62-0ubuntu1", "bluez-tests-dbgsym": "5.62-0ubuntu1", "bluez-cups": "5.62-0ubuntu1", "bluez-tests": "5.62-0ubuntu1", "bluez": "5.62-0ubuntu1", "bluez-obexd": "5.62-0ubuntu1" } ] }