ALSA-2020:4436
- Source
- https://errata.almalinux.org/8/ALSA-2020-4436.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2020:4436.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2020:4436
- Related
- Published
- 2020-11-03T12:04:30Z
- Modified
- 2022-07-20T15:43:07Z
- Summary
- Low: gnome-software and fwupd security, bug fix, and enhancement update
- Details
-
The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop.
The appstream-data package provides the distribution specific AppStream metadata required for the GNOME and KDE software centers.
The fwupd packages provide a service that allows session software to update device firmware.
The following packages have been upgraded to a later upstream version: gnome-software (3.36.1), fwupd (1.4.2).
Security Fix(es):
- fwupd: Possible bypass in signature verification (CVE-2020-10759)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- References
Affected packages
AlmaLinux:8 / appstream-data
Package
- Name
- appstream-data