ELBA-2025-20377

ELBA-2025-20377 - shim bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-06-18

Description

[15.8-1.0.5]
- Add support for Oracle signed shim [Orabug: 38029686]
- Add vendor shim binaries signed with Oracle Secure Boot Signing (key 2) [Orabug: 38029686]

[15.8-1.0.4]
- Update shim-unsigned v15.8 providing Oracle SecureBoot CA [Orabug: 37631079]

[15.8-1.0.3]
- Update shimx64.efi and shimaa64.efi v15.8 signed by Microsoft [Orabug: 36072879]
- Update shim fb and mm binaries to match unsigned releases [Orabug: 36072879]

[15.8-1.0.2]
- Use binaries with correct shim.ol generation [Orabug: 36072879]
- Set SBAT_AUTOMATIC_DATE=2021030218 [Orabug: 36072879]

[15.8-1.0.1]
- Update to 15.8 [Orabug: 36072879]
- fix CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551 [Orabug: 36072879]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	shim-15.8-1.0.5.el9_4.src.rpm	07ff6a5cb5aa40e1fb0648cc28510da2ce7a6dc7f427a7f4d07a69514cae7d62	-	ol9_aarch64_baseos_latest
	shim-15.8-1.0.5.el9_4.src.rpm	07ff6a5cb5aa40e1fb0648cc28510da2ce7a6dc7f427a7f4d07a69514cae7d62	-	ol9_aarch64_u6_baseos_patch
	shim-aa64-15.8-1.0.5.el9_4.aarch64.rpm	8c08d8e9d33b4e4043f848d8e2748c5bd5e3d478b4c3148f5a0d9ec2e9a47cb4	-	ol9_aarch64_baseos_latest
	shim-aa64-15.8-1.0.5.el9_4.aarch64.rpm	8c08d8e9d33b4e4043f848d8e2748c5bd5e3d478b4c3148f5a0d9ec2e9a47cb4	-	ol9_aarch64_u6_baseos_patch
Oracle Linux 9 (x86_64)	shim-15.8-1.0.5.el9_4.src.rpm	07ff6a5cb5aa40e1fb0648cc28510da2ce7a6dc7f427a7f4d07a69514cae7d62	-	ol9_x86_64_baseos_latest
	shim-15.8-1.0.5.el9_4.src.rpm	07ff6a5cb5aa40e1fb0648cc28510da2ce7a6dc7f427a7f4d07a69514cae7d62	-	ol9_x86_64_u6_baseos_patch
	shim-x64-15.8-1.0.5.el9_4.x86_64.rpm	f63b5aa5a169692a1a7fe33ed92623841a45091b55472554124c3a606ba4658e	-	ol9_x86_64_baseos_latest
	shim-x64-15.8-1.0.5.el9_4.x86_64.rpm	f63b5aa5a169692a1a7fe33ed92623841a45091b55472554124c3a606ba4658e	-	ol9_x86_64_u6_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team