A PGP signature bypass was found in fwupd, which could lead to possible installation of unsigned firmware (CVE-2020-10759).