The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libxmlbUpgrade appstream-data | May 4, 2022 | Sep 15, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 15, 2020 |
| Centos_linux | — | Upgrade gnome-software-debugsourceUpgrade gnome-softwareUpgrade fwupdUpgrade libxmlb-debuginfoUpgrade fwupd-debuginfoUpgrade fwupd-debugsourceUpgrade appstream-dataUpgrade libxmlb-tests-debuginfoUpgrade libxmlb-debugsourceUpgrade gnome-software-debuginfoUpgrade libxmlb | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade fwupdUpgrade libjcat | Jul 10, 2020 | Jul 10, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/libjcat.Upgrade sys-apps/fwupd. | Jul 28, 2020 | Jul 26, 2020 |
| Oracle_linux | — | Upgrade fwupdUpgrade gnome-softwareUpgrade libxmlbUpgrade appstream-data | Nov 12, 2020 | Jun 5, 2020 |
| Redhat_linux | — | No solution existsUpgrade gnome-software-debuginfoUpgrade libxmlbUpgrade fwupd-debugsourceUpgrade gnome-softwareUpgrade appstream-dataUpgrade libxmlb-debuginfoUpgrade gnome-software-debugsourceUpgrade libxmlb-tests-debuginfoUpgrade fwupdUpgrade fwupd-debuginfoUpgrade libxmlb-debugsource | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libxmlbUpgrade libxmlb-debuginfoUpgrade libxmlb-debugsource | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade libfwupdplugin1Upgrade typelib-1_0-Fwupd-2_0Upgrade jcat-toolUpgrade libjcat1Upgrade fwupd-develUpgrade fwupdUpgrade typelib-1_0-FwupdPlugin-1_0Upgrade libjcat-develUpgrade fwupd-langUpgrade libfwupd2Upgrade dfu-toolUpgrade fwupdtpmevlog | Jun 24, 2020 | Jun 15, 2020 |
| Ubuntu | — | Upgrade fwupdUpgrade libfwupd1Upgrade libfwupd2 | Jun 16, 2020 | Jun 15, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub