ELSA-2023-7189

ELSA-2023-7189 - fwupd security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-11-17

Description

[1.7.8-2.0.1]
- Modify %prep to correctly apply downstream patches
- Align sections to 512 bytes [Orabug: 35265981]
- Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981]
- Enabled signing for aarch64 [Orabug: 35265981]
- Modify meson.build for fwupd-efi [Orabug: 35265981]
- Update SBAT data to include Oracle [Oracle: 33072886]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)

[1.7.8-2]
- Backport the Redfish security fixes which affect IDRAC.
- Resolves: rhbz#2170950

Related CVEs

CVE-2022-3287

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	fwupd-1.7.8-2.0.1.el8.src.rpm	fd49e580e97e39058491fbb69ce0c315	-	ol8_aarch64_baseos_latest
	fwupd-1.7.8-2.0.1.el8.src.rpm	fd49e580e97e39058491fbb69ce0c315	-	ol8_aarch64_codeready_builder
	fwupd-1.7.8-2.0.1.el8.src.rpm	fd49e580e97e39058491fbb69ce0c315	-	ol8_aarch64_u9_baseos_base
	fwupd-1.7.8-2.0.1.el8.aarch64.rpm	88a78c05a174c5e6c31101c10b38a4af	-	ol8_aarch64_baseos_latest
	fwupd-1.7.8-2.0.1.el8.aarch64.rpm	88a78c05a174c5e6c31101c10b38a4af	-	ol8_aarch64_u9_baseos_base
	fwupd-devel-1.7.8-2.0.1.el8.aarch64.rpm	5b45439d67d3c409506f8d7cce4d7d7a	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	fwupd-1.7.8-2.0.1.el8.src.rpm	fd49e580e97e39058491fbb69ce0c315	-	ol8_x86_64_baseos_latest
	fwupd-1.7.8-2.0.1.el8.src.rpm	fd49e580e97e39058491fbb69ce0c315	-	ol8_x86_64_codeready_builder
	fwupd-1.7.8-2.0.1.el8.src.rpm	fd49e580e97e39058491fbb69ce0c315	-	ol8_x86_64_u9_baseos_base
	fwupd-1.7.8-2.0.1.el8.x86_64.rpm	e2b67b2a6c65afee597c52ad0478721f	-	ol8_x86_64_baseos_latest
	fwupd-1.7.8-2.0.1.el8.x86_64.rpm	e2b67b2a6c65afee597c52ad0478721f	-	ol8_x86_64_u9_baseos_base
	fwupd-devel-1.7.8-2.0.1.el8.x86_64.rpm	47ed1da1fee14b5699ab0732ff22f923	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team