oss-sec mailing list archives

CVE request: Blueman: Privilege escalation in blueman dbus API


From: Salvatore Bonaccorso <carnil () debian org>
Date: Fri, 18 Dec 2015 22:17:32 +0100

Hi

There is a privilege escalation vulnerability in Blueman, a GTK+
Bluetooth Manager.

It was reported upstream in [0] and fixed via [1] (for 2.0-stable) and
[2] (for master).

 [0] https://github.com/blueman-project/blueman/issues/416
 [1] https://github.com/blueman-project/blueman/commit/a3845bbed5fdddf14daec436b7e74f62719a71c1 (2-0-stable)
 [2] https://github.com/blueman-project/blueman/commit/e3d249391654da3fefe08b5389c2030fff1b12ea (master)

Could you please assign a CVE for this issue?

Regards,
Salvatore


Current thread: