Update to 1.15.4 * Fix CVE-2023-28100 and CVE-2023-28101. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-508e400dec 2023-03-20 00:15:34.784233 --------------------------------------------------------------------------------Name : flatpak Product : Fedora 38 Version : 1.15.4 Release : 1.fc38 URL : https://flatpak.org/ Summary : Application deployment framework for desktop apps Description : flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. --------------------------------------------------------------------------------Update Information: Update to 1.15.4 * Fix CVE-2023-28100 and CVE-2023-28101 --------------------------------------------------------------------------------ChangeLog: * Fri Mar 17 2023 David King - 1.15.4-1 - Update to 1.15.4 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-508e400dec' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
An update that solves one vulnerability, contains one feature and has one errata is now available. . SUSE Security Update: Security update for fwupd ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1107-1 Rating: important References: #1172643 #1182057 SLE-16809 Cross-References: CVE-2020-10759 CVSS scores: CVE-2020-10759 (NVD) : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVE-2020-10759 (SUSE): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: SUSE Linux Enterprise Module for Desktop Applications 15-SP2 ______________________________________________________________________________ An update that solves one vulnerability, contains one feature and has one errata is now available. Description: This update for fwupd fixes the following issues: - Update to version 1.2.14: (bsc#1182057) - Add SBAT section to EFI images (bsc#1182057) - CVE-2020-10759: Validate that gpgme_op_verify_result() returned at least one signature (bsc#1172643) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Desktop Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2021-1107=1 Package List: - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64): fwupd-1.2.14-5.8.2 fwupd-debuginfo-1.2.14-5.8.2 fwupd-debugsource-1.2.14-5.8.2 fwupd-devel-1.2.14-5.8.2 libfwupd2-1.2.14-5.8.2 libfwupd2-debuginfo-1.2.14-5.8.2 typelib-1_0-Fwupd-2_0-1.2.14-5.8.2 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (noarch): fwupd-lang-1.2.14-5.8.2 References: https://www.suse.com/security/cve/CVE-2020-10759.html https://bugzilla.suse.com/1172643 https://bugzilla.suse.com/1182057 . Crucial SUSE Security Patch for fwupd addresses a security flaw, introduces enhancements, and offers installation instructions.. fwupd Update, SUSE Security Update, Linux Module, Desktop Applications. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.