And the gnome-bluetooth fix was released in 3.28.2.
** Package changed: bluez (Ubuntu) => gnome-bluetooth (Ubuntu)
** Changed in: gnome-bluetooth (Ubuntu)
Status: Fix Committed => Fix Released
** Also affects: gnome-bluetooth (Ubuntu Disco)
Importance: Medium
Status: Fix Released
** Also affects: gnome-bluetooth (Ubuntu Cosmic)
Importance: Undecided
Status: New
** Also affects: gnome-bluetooth (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: gnome-bluetooth (Ubuntu Cosmic)
Status: New => Fix Released
** Changed in: gnome-bluetooth (Ubuntu Cosmic)
Importance: Undecided => Medium
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10910
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to bluez in Ubuntu.
https://bugs.launchpad.net/bugs/1791405
Title:
bluetooth always in discoverable mode (security issue)
Status in bluez package in Ubuntu:
New
Status in gnome-bluetooth package in Ubuntu:
Fix Released
Status in bluez source package in Bionic:
New
Status in gnome-bluetooth source package in Bionic:
Fix Released
Status in bluez source package in Cosmic:
New
Status in gnome-bluetooth source package in Cosmic:
Fix Released
Status in bluez source package in Disco:
New
Status in gnome-bluetooth source package in Disco:
Fix Released
Status in bluez source package in EE-Series:
Fix Committed
Status in gnome-bluetooth package in Fedora:
Confirmed
Bug description:
Excerpt from a similar report
(https://bugzilla.redhat.com/show_bug.cgi?id=1602985) :
Opening the Bluetooth settings will make the device discoverable
again, but does not make the device undiscoverable after the settings
are closed (this is not intended behavior; devices should only be
discoverable when the bluetooth settings UI is open).
There seem to be a merge request :
https://gitlab.gnome.org/GNOME/gnome-bluetooth/merge_requests/1
Could you please merge it asap, it should be treated as a security
issue IMHO.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1791405/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
