SUSE SLES15 Security Update : bluez (SUSE-SU-2022:3687-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3687-1 advisory. - CVE-2021-0129: Fixed improper access control bsc1186463. - CVE-2020-26558: Fixed vulnerability that may permit a nearby...

CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...