CentOS Linux 7.9 [CIQ] Security Update: shim-unsigned-ia32 / shim-unsigned-x64 Multiple Vulnerabilities (ciqsa-2026_0737)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260737 advisory. This advisory aggregates security fixes for the shim-unsigned-x64 SRPM in CIQ CentOS Bridge 7.9. It addresses 7 CVEs: CVE-2022-28737, CVE-2023-40546,...

AZL-105903 CVE-2026-35189 affecting package shim-unsigned-x64 16.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105900 CVE-2026-35189 affecting package shim-unsigned-aarch64 16.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-95637 CVE-2026-19411 affecting package shim-unsigned-x64 16.1-2

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

AZL-95634 CVE-2026-19411 affecting package shim-unsigned-aarch64 16.1-2

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

Azure Linux 3.0 Security Update: shim-unsigned-aarch64 (CVE-2019-14584)

The version of shim-unsigned-aarch64 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-14584 advisory. - Null pointer dereference in Tianocore EDK2 May allow an authenticated user to potentially...

CVE-2021-23840 affecting package shim-unsigned-x64 for versions less than 1.1.1-1

CVE-2021-23840 affecting package shim-unsigned-x64 for versions less than 1.1.1-1. A patched version of the package is available...

CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5

CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5. A patched version of the package is available...

CVE-2021-23841 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2021-23841 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. A patched version of the package is available...

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5. This CVE either no longer is or was never applicable...

CVE-2023-0215 affecting package shim-unsigned-x64 15.8-1

CVE-2023-0215 affecting package shim-unsigned-x64 15.8-1. This CVE either no longer is or was never applicable...

CVE-2023-0215 affecting package shim-unsigned-x64 15.4-2

CVE-2023-0215 affecting package shim-unsigned-x64 15.4-2. This CVE either no longer is or was never applicable...

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5. This CVE either no longer is or was never applicable...

CVE-2023-40547 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2023-40547 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2023-40549 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2023-40549 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2023-40550 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2023-40550 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2023-40548 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2023-40548 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2023-40546 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2023-40546 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2022-28737 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2022-28737 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2019-14584 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

CVE-2019-14584 affecting package shim-unsigned-aarch64 for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...