ELSA-2020-4436

ELSA-2020-4436 - gnome-software and fwupd security, bug fix, and enhancement update

Type:SECURITY
Severity:LOW
Release Date:2020-11-10

Description


appstream-data
[8-20200724]
- Regenerate the RHEL metadata to include the EPEL apps too
- Resolves: #1844488

[8-20200630]
- Regenerate the RHEL metadata
- Resolves: #1844488

fwupd
[1.4.2-4.0.1]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)

[1.4.2-4]
- Add signing with redhatsecureboot503 cert
Related: CVE-2020-10713

[1.4.2-3]
- Obsolete the now-dead fwupdate package to prevent file conflicts
- Resolves: #1859202

[1.4.2-2]
- Security fix for CVE-2020-10759
- Resolves: #1844324

[1.4.2-1]
- New upstream release
- Backport a patch to fix the synaptics fingerprint reader update.
- Resolves: #1775277

[1.4.1-1]
- New upstream release
- Resolves: #1775277

gnome-software
[3.36.1-4]
- Fix 'Show Details' to correctly work for rpm-installed firefox
- Resolves: #1845714

[3.36.1-3]
- Upload correct 3.36.1 tarball
- Fix hardcoded desktop and appdata names to match whats in RHEL 8.3
- Add back shell extensions support
- Resolves: #1839774

[3.36.1-2]
- Add support for basic auth and webflow auth in flatpak plugin
- Resolves: #1815502

[3.36.1-1]
- Update to 3.36.1
- Resolves: #1797932

libxmlb
[0.1.15-1]
- Initial release for RHEL


Related CVEs


CVE-2020-10759

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) appstream-data-8-20200724.el8.src.rpm9b411e3d3c2008f47fdb632331447d5e-
fwupd-1.4.2-4.0.1.el8.src.rpmd10028326c693a1e2a9bd5a5c285c3c7-
gnome-software-3.36.1-4.el8.src.rpmfdbf43b2988afbba140c711ce22021ac-
libxmlb-0.1.15-1.el8.src.rpm35d583438fe24ef83a8749ed7dec2161-
appstream-data-8-20200724.el8.noarch.rpmc58fb54eda542b690ddaaccea5ba4026-
fwupd-1.4.2-4.0.1.el8.aarch64.rpm9cd7d296af4c917144b16199f6e434bb-
gnome-software-3.36.1-4.el8.aarch64.rpm537114ac721a1245a696ba2fa9ca1e27-
libxmlb-0.1.15-1.el8.aarch64.rpmb4c304267c397979b97e99483de78701-
Oracle Linux 8 (x86_64) appstream-data-8-20200724.el8.src.rpm9b411e3d3c2008f47fdb632331447d5e-
fwupd-1.4.2-4.0.1.el8.src.rpmd10028326c693a1e2a9bd5a5c285c3c7-
gnome-software-3.36.1-4.el8.src.rpmfdbf43b2988afbba140c711ce22021ac-
libxmlb-0.1.15-1.el8.src.rpm35d583438fe24ef83a8749ed7dec2161-
appstream-data-8-20200724.el8.noarch.rpmc58fb54eda542b690ddaaccea5ba4026-
fwupd-1.4.2-4.0.1.el8.x86_64.rpmcd58328dcbe1560ac9aeb45b89af3de7-
gnome-software-3.36.1-4.el8.x86_64.rpm1bc99077c77558fe4d90af0d97b55687-
libxmlb-0.1.15-1.el8.i686.rpm40dc32c888e09d1c8b1d5eb4dd44b5df-
libxmlb-0.1.15-1.el8.x86_64.rpma5fddc5ee55d6288be0228498bc5895d-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete