This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============0565336817671379624==
Content-Language: en-CA
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------ZNA0MgRsSQJExEud0eLW3Z8v"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------ZNA0MgRsSQJExEud0eLW3Z8v
Content-Type: multipart/mixed;
 boundary="------------k5IrwkKjldeeGLOABCKqGQV0";
 protected-headers="v1"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: "ubuntu-security-announce@lists.ubuntu.com"
 <ubuntu-security-announce@lists.ubuntu.com>
Message-ID: <c2de1dc7-6f8c-7fa7-0a2f-d72b9f3dfbfb@canonical.com>
Subject: [USN-5481-1] BlueZ vulnerabilities

--------------k5IrwkKjldeeGLOABCKqGQV0
Content-Type: text/plain; charset=UTF-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-5481-1
June 15, 2022

bluez vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in BlueZ.

Software Description:
- bluez: Bluetooth tools and daemons

Details:

It was discovered that BlueZ incorrectly validated certain capabilities
and lengths when handling the A2DP profile. A remote attacker could use
this issue to cause BlueZ to crash, resulting in a denial of service, or
possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  bluez                           5.53-0ubuntu3.6
  libbluetooth3                   5.53-0ubuntu3.6

Ubuntu 18.04 LTS:
  bluez                           5.48-0ubuntu3.9
  libbluetooth3                   5.48-0ubuntu3.9

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5481-1
  https://launchpad.net/bugs/1977968

Package Information:
  https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.6
  https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.9

--------------k5IrwkKjldeeGLOABCKqGQV0--

--------------ZNA0MgRsSQJExEud0eLW3Z8v
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----
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=ifnI
-----END PGP SIGNATURE-----

--------------ZNA0MgRsSQJExEud0eLW3Z8v--


--===============0565336817671379624==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

Cg==

--===============0565336817671379624==--