RHSA-2020:4436
RHSA-2020:4436 · Red Hat Security Advisory: gnome-software and fwupd security, bug fix, and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: gnome-software and fwupd security, bug fix, and enhancement update
CVSS 5.7 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
appstream-data Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:8-20200724.el8
Update to 0:8-20200724.el8
gnome-software Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.36.1-4.el8
Update to 0:3.36.1-4.el8
gnome-software-debuginfo Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.36.1-4.el8
Update to 0:3.36.1-4.el8
gnome-software-debugsource Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.36.1-4.el8
Update to 0:3.36.1-4.el8
fwupd Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:1.4.2-4.el8
Update to 0:1.4.2-4.el8
fwupd-debuginfo Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:1.4.2-4.el8
Update to 0:1.4.2-4.el8
fwupd-debugsource Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:1.4.2-4.el8
Update to 0:1.4.2-4.el8
libxmlb Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:0.1.15-1.el8
Update to 0:0.1.15-1.el8
libxmlb-debuginfo Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:0.1.15-1.el8
Update to 0:0.1.15-1.el8
libxmlb-debugsource Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:0.1.15-1.el8
Update to 0:0.1.15-1.el8
libxmlb-tests-debuginfo Red Hat:enterprise_linux:8::baseos
- Affected ranges
- ECOSYSTEM: < 0:0.1.15-1.el8
Update to 0:0.1.15-1.el8
Original sources
- https://access.redhat.com/errata/RHSA-2020:4436
- https://access.redhat.com/security/updates/classification/#low
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
- https://bugzilla.redhat.com/show_bug.cgi?id=1797932
- https://bugzilla.redhat.com/show_bug.cgi?id=1815502
- https://bugzilla.redhat.com/show_bug.cgi?id=1839774
- https://bugzilla.redhat.com/show_bug.cgi?id=1844316
- https://bugzilla.redhat.com/show_bug.cgi?id=1844488
- https://bugzilla.redhat.com/show_bug.cgi?id=1845714
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4436.json
- https://access.redhat.com/security/cve/CVE-2020-10759
- https://www.cve.org/CVERecord?id=CVE-2020-10759
- https://nvd.nist.gov/vuln/detail/CVE-2020-10759
- https://github.com/justinsteven/advisories/blob/master/2020_fwupd_dangling_s3_bucket_and_CVE-2020-10759_signature_verification_bypass.md
- https://osv.dev/vulnerability/RHSA-2020:4436