Lucene search

K
osvGoogleOSV:RLSA-2020:4436
HistoryNov 03, 2020 - 12:04 p.m.

Low: gnome-software and fwupd security, bug fix, and enhancement update

2020-11-0312:04:30
Google
osv.dev
10
gnome-software
fwupd
security
bug fix
enhancement
appstream
firmware
cve-2020-10759
rocky linux 8.3

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

18.0%

The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop.

The appstream-data package provides the distribution specific AppStream metadata required for the GNOME and KDE software centers.

The fwupd packages provide a service that allows session software to update device firmware.

The following packages have been upgraded to a later upstream version: gnome-software (3.36.1), fwupd (1.4.2).

Security Fix(es):

  • fwupd: Possible bypass in signature verification (CVE-2020-10759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.