[SECURITY] Fedora 38 Update: fwupd-1.9.6-1.fc38

fwupd is a daemon to allow session software to update device firmware...

fwupd security and bug fix update

1.8.10-2.0.1 - Drop pesign.service restart in postun Orabug: 34760075 - Update signing certificate JIRA: OLDIS-16371 - Rebuild for SecureBoot signatures Orabug: 33801813 - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir Orabug: 29881368 - Use new signing certificate...

AlmaLinux 9 : fwupd (ALSA-2023:2487)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2487 advisory. - When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper...

RHEL 9 : fwupd (RHSA-2023:2487)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2487 advisory. The fwupd packages provide a service that allows session software to update device firmware. Security Fixes: fwupd: world readable password ...

fwupd: world readable password in /etc/fwupd/redfish.conf

A flaw was found in fwupd. When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file...

Moderate: Red Hat Security Advisory: fwupd security and bug fix update

An update for fwupd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware. Security Fixes: fwupd: world readable password in /etc/fwupd/redfish.conf CVE-2022-3287 shim: 3rd party shim allow secure boot bypass CVE-2022-34301 shim: 3rd party shim allow secure boot bypass...

ALSA-2023:2487 Moderate: fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware. Security Fixes: fwupd: world readable password in /etc/fwupd/redfish.conf CVE-2022-3287 shim: 3rd party shim allow secure boot bypass CVE-2022-34301 shim: 3rd party shim allow secure boot bypass...

SUSE SLED15: dfu-tool / fwupd / fwupd-devel / fwupd-lang / libfwupd2 / etc (SUSE-SU-2023:2050-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2050-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding...

SUSE-SU-2023:2050-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36153 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that has been fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

SUSE SLES15: fwupd / fwupd-devel / fwupd-lang / libfwupd2 / etc (SUSE-SU-2023:2000-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2000-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding description block directly from the SUSE...

SUSE: Security Advisory (SUSE-SU-2023:2000-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: fwupd / fwupd-devel / fwupd-lang / fwupdtpmevlog / libfwupd2 / etc (SUSE-SU-2023:1999-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1999-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2023:1999-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2000-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:1999-1 Security update for fwupd

This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36150 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue concerns a problem that is fixed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a...

SUSE CVE-2020-10759

A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service LVFS is either not implemented or enabled in versions ...

fwupd bug fix and enhancement update

An update is available for fwupd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...