Stay Secure with the Latest Linux Advisories

security advisorymoderatefedora

Fedora 32: libjcat FEDORA-2020-eec60309f2 Moderate: Signature Bypass

Security fix for CVE-2020-10759. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-eec60309f2 2020-06-16 01:25:41.304231 --------------------------------------------------------------------------------Name : libjcat Product : Fedora 32 Version : 0.1.2 Release : 2.fc32 URL : https://github.com/hughsie/libjcat Summary : Library for reading Jcat files Description : This library allows reading and writing gzip-compressed JSON catalog files, which can be used to store GPG, PKCS-7 and SHA-256 checksums for each file. This provides equivalent functionality to the catalog files supported in Microsoft Windows. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2020-10759 --------------------------------------------------------------------------------ChangeLog: * Fri Jun 5 2020 Richard Hughes 0.1.2-2 - Fix for CVE-2020-10759 * Mon Apr 27 2020 Richard Hughes 0.1.2-1 - New upstream release - Build fixes mostly for RHEL * Tue Apr 14 2020 Richard Hughes 0.1.1-1 - New upstream release - Allow adding an item ID 'alias' - Make the installed tests actually work --------------------------------------------------------------------------------References: [ 1 ] Bug #1844316 - CVE-2020-10759 fwupd: Possible bypass in signature verification https://bugzilla.redhat.com/show_bug.cgi?id=1844316 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-eec60309f2' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Crucial patch for libjcat in Fedora tackles CVE-2020-10759 to improve library safety.. Libjcat Update, Fedora Security, Signature Bypass, CVE Fixes. . LinuxSecurity.com Team

Jun 15, 2020 Fedora