From: Bernd Kuhls <bernd.kuhls@t-online.de>
Date: Sat, 16 Sep 2017 10:44:30 +0200
Subject: [Buildroot] [PATCH] bluez5_utils: add upstream security fix
	for	CVE-2017-1000250
References: <20170913121955.21236-1-peter@korsgaard.com>
Message-ID: <es4v8exukd.ln2@ID-313208.user.individual.net>
List-Id: <buildroot.busybox.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: buildroot@busybox.net

Am Wed, 13 Sep 2017 14:19:55 +0200 schrieb Peter Korsgaard:

> Fixes CVE-2017-1000250 - All versions of the SDP server in BlueZ 5.46
> and earlier are vulnerable to an information disclosure vulnerability
> which allows remote attackers to obtain sensitive information from the
> bluetoothd process memory.  This vulnerability lies in the processing of
> SDP search attribute requests.

Hi,

this patch was is included in upstream release 5.47 and can be marked as 
superseded by this patch: http://patchwork.ozlabs.org/patch/814482/

Regards, Bernd