Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 38: FEDORA-2024-2aa28a4cfc critical: shim secure boot update

fedora
Calendar Grey March 18, 2024
Dist Fedora Esm H88
The recent update for shim-15.8 in Fedora 38 resolves several security vulnerabilities and improves secure boot functionalities.
Update to shim-15.8

Summary

Initial UEFI bootloader that handles chaining to a trusted full bootloader

under secure boot environments. This package contains the version signed by

the UEFI signing service.

Update Information:

Update to shim-15.8

Topics%20covered

Topics Covered

security advisory security issue update critical Fedora secure boot shim bootloader

Change Log

* Tue Mar 12 2024 Peter Jones - 15.8-2 - Update to shim-15.8 Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: CVE-2023-40548 Resolves: CVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551 Resolves: rhbz#2113005 Resolves: rhbz#2189197 Resolves: rhbz#2238884 Resolves: rhbz#2259264

References


[ 1 ] Bug #2113005 - Live image made with BOOTX64.EFI from latest shim-x64-15.6-2 fails to boot on some boards https://bugzilla.redhat.com/show_bug.cgi?id=2113005 [ 2 ] Bug #2198977 - Secure boot shim cert seems to be out of date (exp. Dec. 2022) https://bugzilla.redhat.com/show_bug.cgi?id=2198977 [ 3 ] Bug #2238884 - Version bump to 15.7 https://bugzilla.redhat.com/show_bug.cgi?id=2238884 [ 4 ] Bug #2259264 - Fedora fails to boot via BOOT/bootaa64->fbaa64 on UEFI machines with EFI_MEMORY_ATTRIBUTES_PROTOCOL https://bugzilla.redhat.com/show_bug.cgi?id=2259264

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2aa28a4cfc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: shim
Product: Fedora 38
Version: 15.8
Release: 2
URL: https://github.com/rhboot/shim/
Summary: First-stage UEFI bootloader

Topics%20covered

Topics Covered

security advisory security issue update critical Fedora secure boot shim bootloader

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here