PT-2025-33478 · Fedora · Shim

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired, potentially allowing the loading of old or invalid signed boot components...

EulerOS 2.0 SP11 : grub2 (EulerOS-SA-2025-1928)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers...

EulerOS 2.0 SP11 : grub2 (EulerOS-SA-2025-1954)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers...

August 12, 2025—KB5063950 (Monthly Rollup)

None None...

August 12, 2025—KB5063947 (Monthly Rollup)

None None...

August 12, 2025—KB5063875 (OS Builds 22621.5768 and 22631.5768)

None None...

August 12, 2025—KB5063871 (OS Build 14393.8330)

None None...

August 12, 2025—Hotpatch KB5063812 (OS Build 20348.3989)

None None...

August 12, 2025—KB5063888 (Monthly Rollup)

None None...

August 12, 2025—KB5063899 (OS Build 25398.1791)

None None...

August 12, 2025—KB5063889 (OS Build 10240.21100)

None None...

August 12, 2025—Hotpatch KB5064010 (OS Build 26100.4851)

None None...

August 12, 2025—KB5063948 (Security-only update)

None None...

August 12, 2025—KB5063709 (OS Builds 19044.6216 and 19045.6216)

None None...

August 12, 2025—KB5063880 (OS Build 20348.4052)

None None...

August 12, 2025—KB5063877 (OS Build 17763.7678)

None None...

August 12, 2025—KB5063878 (OS Build 26100.4946)

None None...

August 12, 2025—KB5063927 (Security-only update)

None None...

August 12, 2025—KB5063906 (Monthly Rollup)

None None...

Physical Attacks Leading to Bypass of ASP Boot ROM Secure Boot

Summary Researchers shared a report titled “Code Execution on Zen 4 PSP using Voltage Fault Injection.” In the paper, the researchers reported their findings on Voltage Fault Injection VFI attacks targeting AMD “Zen 4” CPUs, specifically the Ryzen™ 8600G model. The researchers claim these types o...