ELSA-2024-1902

ELSA-2024-1902 - shim security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2024-04-25

Description


[15.8-4.0.1]
- Add support for Oracle signed shim [Orabug: 36540084]
- Add shim binaries signed with Oracle Secure Boot Signing (key 1) [Orabug: 36540084]

[15.8-1.0.3]
- Update shimx64.efi, shimia32.efi and shimaa64.efi v15.8 signed by Microsoft [Orabug: 36072863]

[15.8-1.0.2]
- Use binaries with correct shim.ol generation [Orabug: 36072863]
- Set SBAT_AUTOMATIC_DATE=2021030218 [Orabug: 36072863]

[15.8-1.0.1]
- Update to 15.8 [Orabug: 36072863]
- fix CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551 [Orabug: 36072863]


Related CVEs


CVE-2023-40546
CVE-2023-40549
CVE-2023-40548
CVE-2023-40547
CVE-2023-40550
CVE-2023-40551

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) shim-15.8-4.0.1.el8.src.rpmcddbf396b12b600c9d2af7013dce31b6-ol8_aarch64_baseos_latest
shim-15.8-4.0.1.el8.src.rpmcddbf396b12b600c9d2af7013dce31b6-ol8_aarch64_u9_baseos_patch
shim-aa64-15.8-4.0.1.el8.aarch64.rpm72a50e0802ae2ba9213ddda438bbd713-ol8_aarch64_baseos_latest
shim-aa64-15.8-4.0.1.el8.aarch64.rpm72a50e0802ae2ba9213ddda438bbd713-ol8_aarch64_u9_baseos_patch
Oracle Linux 8 (x86_64) shim-15.8-4.0.1.el8.src.rpmcddbf396b12b600c9d2af7013dce31b6-ol8_x86_64_baseos_latest
shim-15.8-4.0.1.el8.src.rpmcddbf396b12b600c9d2af7013dce31b6-ol8_x86_64_u9_baseos_patch
shim-ia32-15.8-4.0.1.el8.x86_64.rpmd94a5f46ce8152e64bbc3645a57d8b27-ol8_x86_64_baseos_latest
shim-ia32-15.8-4.0.1.el8.x86_64.rpmd94a5f46ce8152e64bbc3645a57d8b27-ol8_x86_64_u9_baseos_patch
shim-x64-15.8-4.0.1.el8.x86_64.rpm2e9c6db76bae10b26f5a96cf8dbebd7b-ol8_x86_64_baseos_latest
shim-x64-15.8-4.0.1.el8.x86_64.rpm2e9c6db76bae10b26f5a96cf8dbebd7b-ol8_x86_64_u9_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete