Summary
appstream-data
[8-20200724]
- Regenerate the RHEL metadata to include the EPEL apps too
- Resolves: #1844488
[8-20200630]
- Regenerate the RHEL metadata
- Resolves: #1844488
fwupd
[1.4.2-4.0.1]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)
[1.4.2-4]
- Add signing with redhatsecureboot503 cert
Related: CVE-2020-10713
[1.4.2-3]
- Obsolete the now-dead fwupdate package to prevent file conflicts
- Resolves: #1859202
[1.4.2-2]
- Security fix for CVE-2020-10759
- Resolves: #1844324
[1.4.2-1]
- New upstream release
- Backport a patch to fix the synaptics fingerprint reader update.
- Resolves: #1775277
[1.4.1-1]
- New upstream release
- Resolves: #1775277
gnome-software
[3.36.1-4]
- Fix 'Show Details' to correctly work for rpm-installed firefox
- Resolves: #1845714
[3.36.1-3]
- Upload correct 3.36.1 tarball
- Fix hardcoded desktop and appdata names to match whats in RHEL 8.3
- Add back shell extensions support
- Resolves: #1839774
[3.36.1-2]
- Add support for basic auth and webflow auth in flatpak plugin
- Resolves: #1815502
[3.36.1-1]
- Update to 3.36.1
- Resolves: #1797932
libxmlb
[0.1.15-1]
- Initial release for RHEL
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | appstream-data | 0:8-20200724.el8 |
| Oracle Linux · 8 | fwupd | 0:1.4.2-4.0.1.el8 |
| Oracle Linux · 8 | gnome-software | 0:3.36.1-4.el8 |
| Oracle Linux · 8 | libxmlb | 0:0.1.15-1.el8 |
Vulnerabilities 1
-
Unscored —CVE-2020-10759 Public exploit
A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmwar…