[slackware-security] bluez

New bluez packages are available for Slackware 13.1, 13.37, 14.0, 14.1, 14.2,
and -current to fix a security issue.

Here are the details from the Slackware 14.2 ChangeLog:

patches/packages/bluez-5.47-i586-1_slack14.2.txz: Upgraded.
Fixed an information disclosure vulnerability which allows remote attackers
to obtain sensitive information from the bluetoothd process memory. This
vulnerability lies in the processing of SDP search attribute requests.
For more information, see:
https://vulners.com/cve/CVE-2017-1000250
(* Security fix *)

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/bluez-4.64-i486-2_slack13.1.txz

Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/bluez-4.64-x86_64-2_slack13.1.txz

Updated package for Slackware 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/bluez-4.91-i486-2_slack13.37.txz

Updated package for Slackware x86_64 13.37:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/bluez-4.91-x86_64-2_slack13.37.txz

Updated package for Slackware 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/bluez-4.99-i486-3_slack14.0.txz

Updated package for Slackware x86_64 14.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/bluez-4.99-x86_64-3_slack14.0.txz

Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/bluez-4.99-i486-4_slack14.1.txz

Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/bluez-4.99-x86_64-4_slack14.1.txz

Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/bluez-5.47-i586-1_slack14.2.txz

Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/bluez-5.47-x86_64-1_slack14.2.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/bluez-5.47-i586-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/bluez-5.47-x86_64-1.txz

MD5 signatures:

Slackware 13.1 package:
c34a144a27aecf012ae0f6d4e9d23ec7 bluez-4.64-i486-2_slack13.1.txz

Slackware x86_64 13.1 package:
00fdad5615839cb6846780890ecd473d bluez-4.64-x86_64-2_slack13.1.txz

Slackware 13.37 package:
0b24842a0c3e6b19bdd45705a155f82f bluez-4.91-i486-2_slack13.37.txz

Slackware x86_64 13.37 package:
01ec2415e62f36ba954ad18316089963 bluez-4.91-x86_64-2_slack13.37.txz

Slackware 14.0 package:
eadceb46961b159ea4580c65f37e1bb3 bluez-4.99-i486-3_slack14.0.txz

Slackware x86_64 14.0 package:
7a8c9f38fbfca7c8dd35997dbe1e6da2 bluez-4.99-x86_64-3_slack14.0.txz

Slackware 14.1 package:
51a0d2992312419dfcdce2335635d613 bluez-4.99-i486-4_slack14.1.txz

Slackware x86_64 14.1 package:
9b1016510c7292343e81263bee3f6710 bluez-4.99-x86_64-4_slack14.1.txz

Slackware 14.2 package:
7ee07b8ee57a8272703bcc706d148d75 bluez-5.47-i586-1_slack14.2.txz

Slackware x86_64 14.2 package:
0a28a8a20122ee46d3ebeb68450d139d bluez-5.47-x86_64-1_slack14.2.txz

Slackware -current package:
230c704d9f97690c8eee0bb32aed2c50 n/bluez-5.47-i586-1.txz

Slackware x86_64 -current package:
2d4d0f25675d824f445c0fbd74c453ee n/bluez-5.47-x86_64-1.txz

Installation instructions:

Upgrade the package as root:
> upgradepkg bluez-5.47-i586-1_slack14.2.txz