-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Mar 2020 10:42:49 +0100 Source: bluez Architecture: source Version: 5.43-2+deb9u2 Distribution: stretch-security Urgency: high Maintainer: Debian Bluetooth Maintainers <pkg-bluetooth-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 953770 Changes: bluez (5.43-2+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Address INTEL-SA-00352 (CVE-2020-0556) (Closes: #953770) - HOGP must only accept data from bonded devices - HID accepts bonded device connections only * input: hog: Attempt to set security level if not bonded * input: Add LEAutoSecurity setting to input.conf Checksums-Sha1: 7a264b6056fb3b369384cae4de6a8658251f35ce 2936 bluez_5.43-2+deb9u2.dsc 77eae3c847bb6eb5fb6cf9e3df07e9cbfaecad24 30480 bluez_5.43-2+deb9u2.debian.tar.xz Checksums-Sha256: 97be0c87939413d3566e7967e118fde4db1033cf7efa12155b2e02155292496f 2936 bluez_5.43-2+deb9u2.dsc 442c6f2f55194f496b86f394df77684c09a546b6e4a39feff111dd2403bd9eed 30480 bluez_5.43-2+deb9u2.debian.tar.xz Files: 34151ebe4c576cce276f1d3d24c0dfce 2936 admin optional bluez_5.43-2+deb9u2.dsc 1e2c4aef142c2fe1d95c89def1a216bd 30480 admin optional bluez_5.43-2+deb9u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl53NQFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Eq9sP/2Wi9pIeZuw3kfGvgeR9gBMCOp8UKmyl PWVOG7xQBhTDJr7dfntPau511VQ1paqcZBrWG6xmS0S2Vw3UCXTo1rpU8p2U4YMD cIBaKbYdsEramqStnIIriQLCPVkz1K87RPNGXpSulUyuDNI9/KEtjSpr7xbxVUBZ sE76EDn92qPcRmdQ5/Hg9kqw9CxsKc+Y78nD+3UchCY7RJp8v+d9xSGwVzcPZgwI NLs22GCAiusYXKKqDzNiTyvsjuB3ZKtS5NCTjPq6dsOOhS554J0OZM9/Y7+XMQnj YQzQpegKejvZGdeQ5m3tB7RvSQnAHrupuiFcQxsPC4lylce7kmYig7uftGs/PtEy AG+s+PVEqKaIWTdR8wy+cMk8PDuSEWh3mErh4Vm5CroazjvbYLzf1RUsWjGtvLWq dFx9OVo4+CpzZL3XG9BE+XM/+H6OmwQPnbSFImmdOBETea9V1vtrlj4IK+8akwFQ DVzefeHhPP4BCmldyCGId08r23AABvNc7r9Gwa0E9/URLwAjn1HqPs0XhlYZ0tju x8E9XJq+UWwjGO+YEmgNdS4W+mH5uArvtlhXD5IyZeK/SIh1Oeag1iSeVqKEL9z9 Aw/QmOf6c+uBvirzrg6lmTuQxRJVeRLVBTcuqtv34z8a3Rn9HkfonLYhGCIKLcne EoI5eoQSZ2FI =hMa4 -----END PGP SIGNATURE-----