Issued:

2015-11-19

Updated:

2015-11-19

RHBA-2015:2358 - shim bug fix and enhancement update

Synopsis

shim bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

An updated shim package that fixes several bugs and adds various enhancements is now available for Red Hat Enterprise Linux 7.

Description

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

The shim package has been upgraded to upstream version 0.9.1, which provides a number of bug fixes and enhancements over the previous version. (BZ#1115843)

This update also fixes the following bug:

• The shim-signed package has been updated to ensure correct operation on the ARM 64-bit hardware architecture. (BZ#1100048)

Users of shim are advised to upgrade to this updated package, which fixes these bugs and adds these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• shim-unsigned-0.9-1.el7.aarch64.rpm
• mokutil-debuginfo-0.9-2.el7.aarch64.rpm
• shim-0.9-1.el7.src.rpm
• mokutil-0.9-2.el7.aarch64.rpm
• shim-unsigned-0.9-1.el7.x86_64.rpm
• mokutil-0.9-2.el7.x86_64.rpm
• mokutil-debuginfo-0.9-2.el7.x86_64.rpm
• shim-unsigned-aa64-debuginfo-0.9-1.el7.noarch.rpm
• shim-unsigned-x64-debuginfo-0.9-1.el7.noarch.rpm
• shim-0.9-2.el7.aarch64.rpm
• shim-signed-0.9-2.el7.src.rpm
• shim-0.9-2.el7.x86_64.rpm

Fixes

(none)

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.