Bug 10920

Summary:	[Update Request] blueman CVE-2020-15238
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Zombie Ryushu <zombie.ryushu>
Component:	Contributed Packages	Assignee:	ROSA Linux Bugs <bugs>
Status:	CONFIRMED ---	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	alzim, andrey.bondrov, denis.silakov, mc2374
Version:	KDE4
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://advisories.mageia.org/MGASA-2020-0402.html
Whiteboard:
Platform:	2016.1	ROSA Vulnerability identifier:	CVE-2020-15238
RPM Package:	blueman-2.1.4-1.mga7	ISO-related:
Bad POT generating:		Upstream:

Description Zombie Ryushu 2020-11-16 12:24:15 MSK

Vaisha Bernard discovered that blueman did not properly sanitize input on the
D-Bus interface to blueman-mechanism. A local attacker could possibly use this
issue to escalate privileges and run arbitrary code or cause a denial of
service (CVE-2020-15238).