Skip to content
OpenAdvisories
Low ELSA-2020-4436 1 CVE

Low: gnome-software and fwupd security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Summary

appstream-data
[8-20200724]
- Regenerate the RHEL metadata to include the EPEL apps too
- Resolves: #1844488

[8-20200630]
- Regenerate the RHEL metadata
- Resolves: #1844488

fwupd
[1.4.2-4.0.1]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)

[1.4.2-4]
- Add signing with redhatsecureboot503 cert
Related: CVE-2020-10713

[1.4.2-3]
- Obsolete the now-dead fwupdate package to prevent file conflicts
- Resolves: #1859202

[1.4.2-2]
- Security fix for CVE-2020-10759
- Resolves: #1844324

[1.4.2-1]
- New upstream release
- Backport a patch to fix the synaptics fingerprint reader update.
- Resolves: #1775277

[1.4.1-1]
- New upstream release
- Resolves: #1775277

gnome-software
[3.36.1-4]
- Fix 'Show Details' to correctly work for rpm-installed firefox
- Resolves: #1845714

[3.36.1-3]
- Upload correct 3.36.1 tarball
- Fix hardcoded desktop and appdata names to match whats in RHEL 8.3
- Add back shell extensions support
- Resolves: #1839774

[3.36.1-2]
- Add support for basic auth and webflow auth in flatpak plugin
- Resolves: #1815502

[3.36.1-1]
- Update to 3.36.1
- Resolves: #1797932

libxmlb
[0.1.15-1]
- Initial release for RHEL

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 appstream-data 0:8-20200724.el8
Oracle Linux · 8 fwupd 0:1.4.2-4.0.1.el8
Oracle Linux · 8 gnome-software 0:3.36.1-4.el8
Oracle Linux · 8 libxmlb 0:0.1.15-1.el8

Vulnerabilities 1