TI-2020-08656 CVE-2020-10759 · GHSA-phhj-vpf5-5666
Improper signature verification in fwupd
Priority LOW 27
A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware.
RHSA-2020:4436
gnome-software and fwupd security, bug fix, and enhancement update
Released 2020-11-04 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) appstream-data-8-20200724.el8, gnome-software-3.36.1-4.el8
- Red Hat Enterprise Linux BaseOS (v. 8) fwupd-1.4.2-4.el8, libxmlb-0.1.15-1.el8