Release date:
2026-10-12 18:57:13 UTC
Description:
* SECURITY UPDATE: stack buffer overflow parsing a remote EIR name
- debian/patches/CVE-2026-80186.patch: clamp the name length to
HCI_MAX_NAME_LENGTH in name2utf8() in src/eir.c before copying it
into the fixed-size stack buffer.
- CVE-2026-80186
* SECURITY UPDATE: stack buffer overflow in AVRCP ListPlayerAttributes
response handling
- debian/patches/CVE-2026-85218.patch: validate the AVRCP header and
params_len against the received bytes and clamp the attribute count
to AVRCP_ATTRIBUTE_LAST in avrcp_list_player_attributes_rsp() in
profiles/audio/avrcp.c.
- CVE-2026-85218
Updated packages:
-
bluetooth_5.48-0ubuntu3.9+tuxcare.els2_all.deb
sha:ad3f22fcfab2c9fb63d69b9fdea33814586c0678
-
bluez_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:38cf5f6e1d6759d285145b1987caade20624b0e8
-
bluez-cups_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:53140da0b8261fa102f2cce62dce4b3d134f1701
-
bluez-hcidump_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:6a15c691853b9294678846e59adf9b8912ae4a1f
-
bluez-obexd_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:2454500d83223ce83c2407cddf40a88440d44eeb
-
bluez-tests_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:0bc08a138643836d08bc792fbd6f332ea4550697
-
libbluetooth-dev_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:7fd70eba1004a4842cc33c73e6f849a1cb4e0b9f
-
libbluetooth3_5.48-0ubuntu3.9+tuxcare.els2_amd64.deb
sha:bb4300f222f4c31beaaa3ad6e942eb67d9d5d323
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
