Lucene search

K
oraclelinuxOracleLinuxELSA-2020-4436
HistoryNov 10, 2020 - 12:00 a.m.

gnome-software and fwupd security, bug fix, and enhancement update

2020-11-1000:00:00
linux.oracle.com
48

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

appstream-data
[8-20200724]

  • Regenerate the RHEL metadata to include the EPEL apps too
  • Resolves: #1844488
    [8-20200630]
  • Regenerate the RHEL metadata
  • Resolves: #1844488
    fwupd
    [1.4.2-4.0.1]
  • Build with the updated Oracle certificate
  • Use oraclesecureboot301 as certdir [Orabug: 29881368]
  • Use new signing certificate (Alex Burmashev)
    [1.4.2-4]
  • Add signing with redhatsecureboot503 cert
    Related: CVE-2020-10713
    [1.4.2-3]
  • Obsolete the now-dead fwupdate package to prevent file conflicts
  • Resolves: #1859202
    [1.4.2-2]
  • Security fix for CVE-2020-10759
  • Resolves: #1844324
    [1.4.2-1]
  • New upstream release
  • Backport a patch to fix the synaptics fingerprint reader update.
  • Resolves: #1775277
    [1.4.1-1]
  • New upstream release
  • Resolves: #1775277
    gnome-software
    [3.36.1-4]
  • Fix ‘Show Details’ to correctly work for rpm-installed firefox
  • Resolves: #1845714
    [3.36.1-3]
  • Upload correct 3.36.1 tarball
  • Fix hardcoded desktop and appdata names to match whats in RHEL 8.3
  • Add back shell extensions support
  • Resolves: #1839774
    [3.36.1-2]
  • Add support for basic auth and webflow auth in flatpak plugin
  • Resolves: #1815502
    [3.36.1-1]
  • Update to 3.36.1
  • Resolves: #1797932
    libxmlb
    [0.1.15-1]
  • Initial release for RHEL

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P