ELSA-2020-4436

ELSA-2020-4436 - gnome-software and fwupd security, bug fix, and enhancement update

Type:	SECURITY
Severity:	LOW
Release Date:	2020-11-10

Description

appstream-data
[8-20200724]
- Regenerate the RHEL metadata to include the EPEL apps too
- Resolves: #1844488

[8-20200630]
- Regenerate the RHEL metadata
- Resolves: #1844488

fwupd
[1.4.2-4.0.1]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)

[1.4.2-4]
- Add signing with redhatsecureboot503 cert
Related: CVE-2020-10713

[1.4.2-3]
- Obsolete the now-dead fwupdate package to prevent file conflicts
- Resolves: #1859202

[1.4.2-2]
- Security fix for CVE-2020-10759
- Resolves: #1844324

[1.4.2-1]
- New upstream release
- Backport a patch to fix the synaptics fingerprint reader update.
- Resolves: #1775277

[1.4.1-1]
- New upstream release
- Resolves: #1775277

gnome-software
[3.36.1-4]
- Fix 'Show Details' to correctly work for rpm-installed firefox
- Resolves: #1845714

[3.36.1-3]
- Upload correct 3.36.1 tarball
- Fix hardcoded desktop and appdata names to match whats in RHEL 8.3
- Add back shell extensions support
- Resolves: #1839774

[3.36.1-2]
- Add support for basic auth and webflow auth in flatpak plugin
- Resolves: #1815502

[3.36.1-1]
- Update to 3.36.1
- Resolves: #1797932

libxmlb
[0.1.15-1]
- Initial release for RHEL

Related CVEs

CVE-2020-10759

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	appstream-data-8-20200724.el8.src.rpm	9b411e3d3c2008f47fdb632331447d5e	-
	fwupd-1.4.2-4.0.1.el8.src.rpm	d10028326c693a1e2a9bd5a5c285c3c7	-
	gnome-software-3.36.1-4.el8.src.rpm	fdbf43b2988afbba140c711ce22021ac	-
	libxmlb-0.1.15-1.el8.src.rpm	35d583438fe24ef83a8749ed7dec2161	-
	appstream-data-8-20200724.el8.noarch.rpm	c58fb54eda542b690ddaaccea5ba4026	-
	fwupd-1.4.2-4.0.1.el8.aarch64.rpm	9cd7d296af4c917144b16199f6e434bb	-
	gnome-software-3.36.1-4.el8.aarch64.rpm	537114ac721a1245a696ba2fa9ca1e27	-
	libxmlb-0.1.15-1.el8.aarch64.rpm	b4c304267c397979b97e99483de78701	-
Oracle Linux 8 (x86_64)	appstream-data-8-20200724.el8.src.rpm	9b411e3d3c2008f47fdb632331447d5e	-
	fwupd-1.4.2-4.0.1.el8.src.rpm	d10028326c693a1e2a9bd5a5c285c3c7	-
	gnome-software-3.36.1-4.el8.src.rpm	fdbf43b2988afbba140c711ce22021ac	-
	libxmlb-0.1.15-1.el8.src.rpm	35d583438fe24ef83a8749ed7dec2161	-
	appstream-data-8-20200724.el8.noarch.rpm	c58fb54eda542b690ddaaccea5ba4026	-
	fwupd-1.4.2-4.0.1.el8.x86_64.rpm	cd58328dcbe1560ac9aeb45b89af3de7	-
	gnome-software-3.36.1-4.el8.x86_64.rpm	1bc99077c77558fe4d90af0d97b55687	-
	libxmlb-0.1.15-1.el8.i686.rpm	40dc32c888e09d1c8b1d5eb4dd44b5df	-
	libxmlb-0.1.15-1.el8.x86_64.rpm	a5fddc5ee55d6288be0228498bc5895d	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team