Summary
[15.6-1.0.3]
- Update shimx64.efi and shimia32.efi signed by Microsoft [JIRA: OLDIS-16370]
[15.6-1.0.2]
- Update to shim-unsigned v15.6.rc2 [JIRA: OLDIS-16370]
[15.6-1.0.1]
- Update to shim-unsigned v15.6.rc1 [JIRA: OLDIS-16370]
[15.5-1.0.3]
- Update vendor certs [JIRA: OLDIS-16370]
- Update oracle(grub2-sig-key) [JIRA: OLDIS-16370]
[15.5-1.0.1]
- Allow MokListTrusted to be enabled by default [Orabug: 33770149]
- Add patchset to load additional certificates from vendor signed EFI binary [Orabug: 33770149]
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | shim-ia32 | 0:15.6-1.0.3.el8 |
| Oracle Linux · 8 | shim-x64 | 0:15.6-1.0.3.el8 |
Vulnerabilities 1
-
Medium 6.5
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-b…