ELSA-2014-1801

ELSA-2014-1801 - shim security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-11-05

Description

shim
[0.7-8.0.1]
- update Oracle Linux certificates (Alexey Petrenko)
- replace securebootca.cer (Alexey Petrenko)

[0.7-8]
- out-of-bounds memory read flaw in DHCPv6 packet processing
Resolves: CVE-2014-3675
- heap-based buffer overflow flaw in IPv6 address parsing
Resolves: CVE-2014-3676
- memory corruption flaw when processing Machine Owner Keys (MOKs)
Resolves: CVE-2014-3677

[0.7-7]
- Use the right key for ARM Aarch64.

[0.7-6]
- Preliminary build for ARM Aarch64.

shim-signed
[0.7-8.0.1]
- Oracle Linux certificates (Alexey Petrenko)

[0.7-8]
- out-of-bounds memory read flaw in DHCPv6 packet processing
Resolves: CVE-2014-3675
- heap-based buffer overflow flaw in IPv6 address parsing
Resolves: CVE-2014-3676
- memory corruption flaw when processing Machine Owner Keys (MOKs)
Resolves: CVE-2014-3677

[0.7-5.2]
- Get the right signatures on shim-redhat.efi
Related: rhbz#1064449

[0.7-5.1]
- Update for signed shim for RHEL 7
Resolves: rhbz#1064449

Related CVEs

CVE-2014-3675

CVE-2014-3676

CVE-2014-3677

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	shim-0.7-8.0.1.el7_0.src.rpm	417d493c28885b709ceda46f376cd5f1fb7bcebf9b25bf28c1dc52313d94e8bd	ELSA-2024-1959	ol7_x86_64_latest_archive
	shim-0.7-8.0.1.el7_0.src.rpm	417d493c28885b709ceda46f376cd5f1fb7bcebf9b25bf28c1dc52313d94e8bd	ELSA-2024-1959	ol7_x86_64_u0_patch
	shim-signed-0.7-8.0.1.el7_0.src.rpm	86b8f78e10ca6553f978c4e3611bf9a148cb5fe3b9c779ccffd527a35825d852	ELSA-2024-1959	ol7_x86_64_latest_archive
	shim-signed-0.7-8.0.1.el7_0.src.rpm	86b8f78e10ca6553f978c4e3611bf9a148cb5fe3b9c779ccffd527a35825d852	ELSA-2024-1959	ol7_x86_64_u0_patch
	mokutil-0.7-8.0.1.el7_0.x86_64.rpm	4cb383e7eca657b117bf7c86825d02de62945c7274a1b68b5c2a2225f89f8d4c	ELSA-2024-1959	ol7_x86_64_latest_archive
	mokutil-0.7-8.0.1.el7_0.x86_64.rpm	4cb383e7eca657b117bf7c86825d02de62945c7274a1b68b5c2a2225f89f8d4c	ELSA-2024-1959	ol7_x86_64_u0_patch
	shim-0.7-8.0.1.el7_0.x86_64.rpm	5cb648b5cb82b4de3f56f9d84d78359e276c3ba9a9dea1b3190ae93ee4a0827d	ELSA-2024-1959	ol7_x86_64_latest_archive
	shim-0.7-8.0.1.el7_0.x86_64.rpm	5cb648b5cb82b4de3f56f9d84d78359e276c3ba9a9dea1b3190ae93ee4a0827d	ELSA-2024-1959	ol7_x86_64_u0_patch
	shim-unsigned-0.7-8.0.1.el7_0.x86_64.rpm	6b25e84babf8a7a3e96eb3e14ccfe78ef8d2f5bd8e736c951ed2874b95647c69	-	ol7_x86_64_latest_archive
	shim-unsigned-0.7-8.0.1.el7_0.x86_64.rpm	6b25e84babf8a7a3e96eb3e14ccfe78ef8d2f5bd8e736c951ed2874b95647c69	-	ol7_x86_64_u0_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team