Discover offers an update package that zypper dup does not - why?

English Install/Boot/Login
1

I only use zypper dup to update the system on a daily basis (as should be done).
I only use Discover to install or update Flatpak apps I have installed (only 2-3).

I checked for updates in Discover yesterday, and a system package is offered to be installed.
It’s odd because zypper does not offer this update.

Why is this being offered in Discover but not zypper?
(notice the upgrade version is to upgrade from 77 to 371 !!!)
.
Further info …
.
The package that shows to be updated by Discover is:
UEFI dbx

UEFI Secure Boot Forbidden Signature Database
upgrade version 77 to version 371
shows: Update from: Firmwaree Updates (lvfs)

Example:
Version 371
Insecure versions of the Microsoft Windows boot manager affected by Black Lotus were added to the list of forbidden signatures due to a discovered security problem.This updates the dbx to the latest release from Microsoft.

More info is shown …
Information link
https://uefi.org/revocationlistfile

uefi-dbx

2

I assume that that is NOT from the openSUSE Tumbleweed repos. Thus why bother?

3

Aggie, I sometimes have wondered the same, as Discover regularly furnishes non-essential updates to my KDE desktop and icon themes. For me, however, those are the only TW updates that don’t come through zypper dup.

4

@aggie I suspect fwupdate and packagekit integration… I kill all that stuff off on GNOME… :wink: I just use flatpak --user update

5

This is a BIOS update which revokes some bootloader Secureboot keys. It comes from lvfs as shown in Discover. It is not hard to google what lvfs is…
openSUSE does not offer UEFI Bios updates but your mainboard manufacturer (who provides them to lvfs). As Discover uses lvfs as „repo“ the answer to your question is easy…

1 Like
6

I get offered the same package upgrade with ‘discover’ but not zypper/yast. If you check your settings in discover, you will see that it includes ‘lvfs-Linux Vendor Firmware Service’ from where the update is from.

I got the same update from discover for my back-up system which uses kde neon. I installed this without any problems, so installed the update (using Discover) on my main Tumbleweed computer. Again without any issues.

1 Like
7

Thanks all for the answers!

8

This is a firmware update, as @hui mentions. I’ve also got an issue with it updating, claiming that the place the firmware is put doesn’t have enough free space.

Discover isn’t the only source for this, though - if you install fwupdmgr, it knows about these sources as well.

1 Like