RHSA-2021:4432: Moderate: bluez security update
The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Red Hat), and pcmcia configuration files. <br>Security Fix(es):<br><li> bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack (CVE-2020-26558)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:4432?
The severity of RHSA-2021:4432 is classified as important.
How do I fix RHSA-2021:4432?
You can fix RHSA-2021:4432 by updating the bluez package to version 5.56-1.el8 or higher.
What versions of bluez are affected by RHSA-2021:4432?
RHSA-2021:4432 affects bluez versions prior to 5.56-1.el8.
What is the nature of the vulnerability in RHSA-2021:4432?
The vulnerability in RHSA-2021:4432 relates to the Passkey Entry protocol in the Bluetooth Core.
When was RHSA-2021:4432 published?
RHSA-2021:4432 was published on November 20, 2021.