Debian Package Tracker

general

source: bluez (main)
version: 5.50-1
maintainer: Debian Bluetooth Maintainers (DMD)
uploaders: Nobuhiro Iwamatsu [DMD]
arch: all
std-ver: 4.1.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 5.23-2+deb8u1
o-o-sec: 5.23-2+deb8u1
oldstable: 5.43-2+deb9u1
old-sec: 5.43-2+deb9u1
stable: 5.50-1
testing: 5.50-1
unstable: 5.50-1

versioned links

5.23-2+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.43-2+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.50-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

bluetooth (33 bugs: 0, 32, 1, 0)
bluez (96 bugs: 0, 86, 10, 0)
bluez-cups (1 bugs: 0, 1, 0, 0)
bluez-hcidump (1 bugs: 0, 1, 0, 0)
bluez-obexd (1 bugs: 0, 1, 0, 0)
bluez-test-scripts (1 bugs: 0, 1, 0, 0)
bluez-test-tools
libbluetooth-dev
libbluetooth3 (1 bugs: 0, 0, 1, 0)

action needed

A new upstream version is available: 5.51 high

A new upstream version 5.51 is available, you should consider packaging it.

Created: 2019-09-21 Last update: 2019-10-22 15:03

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2018-10910: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

Please fix it.

Created: 2019-07-07 Last update: 2019-10-21 00:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-10910: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

Please fix it.

Created: 2016-12-05 Last update: 2019-10-21 00:30

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-10-22 20:30

Multiarch hinter reports 2 issue(s) normal

There are issues with the multiarch metadata for this package.

bluetooth could be marked Multi-Arch: foreign
bluez-test-scripts could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2019-10-22 15:15

lintian reports 29 warnings normal

Lintian reports 29 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-07-18 Last update: 2019-07-18 04:44

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2018-10910: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

Please fix it.

Created: 2017-06-18 Last update: 2019-10-21 00:30

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2016-7837: Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
CVE-2018-10910: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

Please fix them.

Created: 2016-12-05 Last update: 2019-10-21 00:30

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-10910: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

Please fix it.

Created: 2016-12-05 Last update: 2019-10-21 00:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.1.3).

Created: 2018-04-11 Last update: 2019-09-29 23:40

news

[rss feed]

[2018-08-03] bluez 5.50-1 MIGRATED to testing (Debian testing watch)
[2018-07-29] Accepted bluez 5.50-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2018-05-28] bluez 5.49-4 MIGRATED to testing (Debian testing watch)
[2018-05-28] bluez 5.49-4 MIGRATED to testing (Debian testing watch)
[2018-05-23] Accepted bluez 5.49-4 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2018-05-23] Accepted bluez 5.49-2 (source) into unstable (Nobuhiro Iwamatsu)
[2018-04-16] bluez 5.49-1 MIGRATED to testing (Debian testing watch)
[2018-04-10] Accepted bluez 5.49-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2017-10-01] bluez 5.47-1 MIGRATED to testing (Debian testing watch)
[2017-09-26] Accepted bluez 5.47-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2017-09-23] Accepted bluez 5.23-2+deb8u1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2017-09-23] Accepted bluez 5.43-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2017-09-21] Accepted bluez 4.99-2+deb7u1 (source all amd64) into oldoldstable (Lucas Kanashiro)
[2017-09-19] bluez 5.46-1 MIGRATED to testing (Debian testing watch)
[2017-09-13] Accepted bluez 5.46-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2017-07-08] bluez 5.45-1 MIGRATED to testing (Debian testing watch)
[2017-07-03] Accepted bluez 5.45-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2017-03-25] bluez 5.43-2 MIGRATED to testing (Debian testing watch)
[2017-03-19] Accepted bluez 5.43-2 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2016-11-06] bluez 5.43-1 MIGRATED to testing (Debian testing watch)
[2016-10-31] Accepted bluez 5.43-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2016-10-30] bluez 5.41-1 MIGRATED to testing (Debian testing watch)
[2016-10-25] Accepted bluez 5.41-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2016-07-26] Accepted bluez 5.40-1~exp0 (source all amd64) into experimental, experimental (Nobuhiro Iwamatsu)
[2015-11-12] bluez 5.36-1 MIGRATED to testing (Britney)
[2015-11-07] Accepted bluez 5.36-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2015-08-24] bluez 5.33-1 MIGRATED to testing (Britney)
[2015-08-18] Accepted bluez 5.33-1 (source all amd64) into unstable (Nobuhiro Iwamatsu)
[2014-12-10] bluez 5.23-2 MIGRATED to testing (Britney)
[2014-12-05] Accepted bluez 5.23-2 (source amd64 all) into unstable (Nobuhiro Iwamatsu)

bugs [bug history graph]

all: 168 176
RC: 0
I&N: 148 155
M&W: 20 21
F&P: 0
patch: 2

links

homepage
lintian (0, 29)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.50-0ubuntu4
98 bugs (1 patch)
patches for 5.50-0ubuntu4