Security Bulletin: Vulnerabilities in shim library (CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551) affect Power HMC.

Summary The shim library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-40546 DESCRIPTION: rhboot shim is vulnerable to a denial of service, caused by a NULL pointer dereference f;aw in the mirroroneesl function in...

CVE-2023-40550 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40550 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40547 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40547 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-28737 affecting package shim for versions less than 15.8-1

CVE-2022-28737 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40549 affecting package shim for versions less than 15.8-1

CVE-2023-40549 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40548 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40548 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40546 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40547 affecting package shim for versions less than 15.8-1

CVE-2023-40547 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40550 affecting package shim for versions less than 15.8-1

CVE-2023-40550 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40549 affecting package shim-unsigned-x64 for versions less than 15.8-1

CVE-2023-40549 affecting package shim-unsigned-x64 for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40548 affecting package shim for versions less than 15.8-1

CVE-2023-40548 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40551 affecting package shim for versions less than 15.8-1

CVE-2023-40551 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-40546 affecting package shim for versions less than 15.8-1

CVE-2023-40546 affecting package shim for versions less than 15.8-1. An upgraded version of the package is available that resolves this issue...

CLSA-2024-1724271309 shim: Fix of 4 CVEs

Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves:...

GO-2022-0784 containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd...

Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass

...

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2024-2076)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : shim (EulerOS-SA-2024-2076)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summar...

Important Photon OS Security Update - PHSA-2024-5.0-91-0332

Updates of 'shim-signed', 'python3-setuptools' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2024-2051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...