USN-8908-2: BlueZ regression
Ubuntu's USN-8908-2 fixes a BlueZ A2DP regression that stopped Bluetooth audio devices from reconnecting automatically.
Ubuntu's USN-8908-2 corrects a regression introduced when USN-8908-1 patched BlueZ. Cached remote A2DP stream endpoints were no longer loaded at startup, so Bluetooth audio devices could fail to reconnect or fall back to low-quality profiles. The earlier advisory covered Michael Bommarito's finding that BlueZ mishandled codec capability storage, allowing a possible stack buffer overflow, denial of service, or code execution. That issue affected only Ubuntu 20.04 LTS and 22.04 LTS.
- USN-8908-2 fixes an A2DP regression introduced by the prior BlueZ security update.
- Cached stream endpoints were not loaded, breaking automatic Bluetooth audio reconnection.
- The original issue was a stack buffer overflow in codec capability storage.
- That flaw affected only Ubuntu 20.04 LTS and 22.04 LTS.
From the original article
USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to low-quality audio profiles. This update fixes the problem.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.