{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "RCE in http boot support may lead to Secure Boot bypass", "tracking": { "current_release_date": "2026-07-28T07:32:22+00:00", "generator": { "date": "2026-07-28T07:32:22+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2023-40547", "initial_release_date": "2024-01-23T00:00:00+00:00", "revision_history": [ { "date": "2026-07-28T07:32:22+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.1.0.z", "product": { "name": "Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10", "product": { "name": "Red Hat Enterprise Linux 8.10", "product_id": "rhel-8.10.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:8.2::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:8.2::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.aus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.e4s::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:8.4::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.tus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:8.4::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.6::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.8::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::crb", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.9.0", "product": { "name": "Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.9.0.z", "product": { "name": "Red Hat Enterprise Linux 8.9.0.z", "product_id": "rhel-8.9.0.z::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:9.0::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::crb", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0::crb" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:9.2::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.3.0", "product": { "name": "Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.3.0.z", "product": { "name": "Red Hat Enterprise Linux 9.3.0.z", "product_id": "rhel-9.3.0.z::baseos", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.4", "product": { "name": "Red Hat Enterprise Linux 9.4", "product_id": "rhel-9.4.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "mokutil", "product": { "name": "mokutil", "product_id": "mokutil-0:15.8-1.el7", "product_identification_helper": { "purl": "pkg:rpm/redhat/mokutil@15.8-1.el7?epoch=0" } } }, { "category": "product_version", "name": "mokutil-debuginfo", "product": { "name": "mokutil-debuginfo", "product_id": "mokutil-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/mokutil-debuginfo" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-2.el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-2.el8?epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-2.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-2.el8_2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-2.el8_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-2.el8_4?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-2.el8_6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-2.el8_6?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-3.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-3.el7?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-3.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-3.el9?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-3.el9_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-3.el9_2?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-4.el8_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-4.el8_9?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim-0:15.8-4.el9_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim@15.8-4.el9_3?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64-0:15.8-2.el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64@15.8-2.el8?epoch=0" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64-0:15.8-2.el8_6", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64@15.8-2.el8_6?epoch=0" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64-0:15.8-3.el9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64@15.8-3.el9?epoch=0" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64-0:15.8-3.el9_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64@15.8-3.el9_2?epoch=0" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64-0:15.8-4.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64@15.8-4.el8_9?epoch=0" } } }, { "category": "product_version", "name": "shim-aa64", "product": { "name": "shim-aa64", "product_id": "shim-aa64-0:15.8-4.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-aa64@15.8-4.el9_3?epoch=0" } } }, { "category": "product_version", "name": "shim-ia32", "product": { "name": "shim-ia32", "product_id": "shim-ia32-0:15.8-1.el7", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-ia32@15.8-1.el7?epoch=0" } } }, { "category": "product_version", "name": "shim-ia32", "product": { "name": "shim-ia32", "product_id": "shim-ia32-0:15.8-2.el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-ia32@15.8-2.el8?epoch=0" } } }, { "category": "product_version", "name": "shim-ia32", "product": { "name": "shim-ia32", "product_id": "shim-ia32-0:15.8-2.el8_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-ia32@15.8-2.el8_2?epoch=0" } } }, { "category": "product_version", "name": "shim-ia32", "product": { "name": "shim-ia32", "product_id": "shim-ia32-0:15.8-2.el8_4", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-ia32@15.8-2.el8_4?epoch=0" } } }, { "category": "product_version", "name": "shim-ia32", "product": { "name": "shim-ia32", "product_id": "shim-ia32-0:15.8-2.el8_6", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-ia32@15.8-2.el8_6?epoch=0" } } }, { "category": "product_version", "name": "shim-ia32", "product": { "name": "shim-ia32", "product_id": "shim-ia32-0:15.8-4.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-ia32@15.8-4.el8_9?epoch=0" } } }, { "category": "product_version", "name": "shim-signed", "product": { "name": "shim-signed", "product_id": "shim-signed-0:15.8-1.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-signed@15.8-1.el7?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-aarch64", "product": { "name": "shim-unsigned-aarch64", "product_id": "shim-unsigned-aarch64-0:15.8-2.el9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-aarch64@15.8-2.el9?epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-aarch64", "product": { "name": "shim-unsigned-aarch64", "product_id": "shim-unsigned-aarch64-0:15.8-2.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-aarch64@15.8-2.el9?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-ia32", "product": { "name": "shim-unsigned-ia32", "product_id": "shim-unsigned-ia32-0:15.8-3.el7", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-ia32@15.8-3.el7?epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-x64", "product": { "name": "shim-unsigned-x64", "product_id": "shim-unsigned-x64-0:15.8-2.el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-x64@15.8-2.el8?epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-x64", "product": { "name": "shim-unsigned-x64", "product_id": "shim-unsigned-x64-0:15.8-2.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-x64@15.8-2.el8?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-x64", "product": { "name": "shim-unsigned-x64", "product_id": "shim-unsigned-x64-0:15.8-2.el9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-x64@15.8-2.el9?epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-x64", "product": { "name": "shim-unsigned-x64", "product_id": "shim-unsigned-x64-0:15.8-2.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-x64@15.8-2.el9?arch=src&epoch=0" } } }, { "category": "product_version", "name": "shim-unsigned-x64", "product": { "name": "shim-unsigned-x64", "product_id": "shim-unsigned-x64-0:15.8-3.el7", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-unsigned-x64@15.8-3.el7?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-1.el7", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-1.el7?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-2.el8", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-2.el8?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-2.el8_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-2.el8_2?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-2.el8_4", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-2.el8_4?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-2.el8_6", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-2.el8_6?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-3.el9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-3.el9?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-3.el9_2", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-3.el9_2?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-4.el8_9", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-4.el8_9?epoch=0" } } }, { "category": "product_version", "name": "shim-x64", "product": { "name": "shim-x64", "product_id": "shim-x64-0:15.8-4.el9_3", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim-x64@15.8-4.el9_3?epoch=0" } } }, { "category": "product_version", "name": "shim", "product": { "name": "shim", "product_id": "shim.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/shim?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "mokutil-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:mokutil-0:15.8-1.el7" }, "product_reference": "mokutil-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:mokutil-0:15.8-1.el7" }, "product_reference": "mokutil-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:mokutil-0:15.8-1.el7" }, "product_reference": "mokutil-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:mokutil-0:15.8-1.el7" }, "product_reference": "mokutil-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:mokutil-debuginfo" }, "product_reference": "mokutil-debuginfo", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:mokutil-debuginfo" }, "product_reference": "mokutil-debuginfo", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:mokutil-debuginfo" }, "product_reference": "mokutil-debuginfo", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "mokutil-debuginfo as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:mokutil-debuginfo" }, "product_reference": "mokutil-debuginfo", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:shim" }, "product_reference": "shim", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "shim as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:shim" }, "product_reference": "shim", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "shim as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:shim" }, "product_reference": "shim", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8 as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::baseos:shim-0:15.8-2.el8" }, "product_reference": "shim-0:15.8-2.el8", "relates_to_product_reference": "rhel-8.8.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::baseos:shim-0:15.8-2.el8_2.src" }, "product_reference": "shim-0:15.8-2.el8_2.src", "relates_to_product_reference": "rhel-8.2.0.z.aus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::baseos:shim-0:15.8-2.el8_2.src" }, "product_reference": "shim-0:15.8-2.el8_2.src", "relates_to_product_reference": "rhel-8.2.0.z.tus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_2.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::baseos:shim-0:15.8-2.el8_2.src" }, "product_reference": "shim-0:15.8-2.el8_2.src", "relates_to_product_reference": "rhel-8.2.0.z.e4s::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_4.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.aus::baseos:shim-0:15.8-2.el8_4.src" }, "product_reference": "shim-0:15.8-2.el8_4.src", "relates_to_product_reference": "rhel-8.4.0.z.aus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_4.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.e4s::baseos:shim-0:15.8-2.el8_4.src" }, "product_reference": "shim-0:15.8-2.el8_4.src", "relates_to_product_reference": "rhel-8.4.0.z.e4s::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_4.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.tus::baseos:shim-0:15.8-2.el8_4.src" }, "product_reference": "shim-0:15.8-2.el8_4.src", "relates_to_product_reference": "rhel-8.4.0.z.tus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-2.el8_6.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::baseos:shim-0:15.8-2.el8_6.src" }, "product_reference": "shim-0:15.8-2.el8_6.src", "relates_to_product_reference": "rhel-8.6.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-3.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:shim-0:15.8-3.el7.src" }, "product_reference": "shim-0:15.8-3.el7.src", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-3.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:shim-0:15.8-3.el7.src" }, "product_reference": "shim-0:15.8-3.el7.src", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-3.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:shim-0:15.8-3.el7.src" }, "product_reference": "shim-0:15.8-3.el7.src", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-3.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:shim-0:15.8-3.el7.src" }, "product_reference": "shim-0:15.8-3.el7.src", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-3.el9.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::baseos:shim-0:15.8-3.el9.src" }, "product_reference": "shim-0:15.8-3.el9.src", "relates_to_product_reference": "rhel-9.0.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-3.el9_2.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus::baseos:shim-0:15.8-3.el9_2.src" }, "product_reference": "shim-0:15.8-3.el9_2.src", "relates_to_product_reference": "rhel-9.2.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-4.el8_9.src as a component of Red Hat Enterprise Linux 8.9.0.z", "product_id": "rhel-8.9.0.z::baseos:shim-0:15.8-4.el8_9.src" }, "product_reference": "shim-0:15.8-4.el8_9.src", "relates_to_product_reference": "rhel-8.9.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-0:15.8-4.el9_3.src as a component of Red Hat Enterprise Linux 9.3.0.z", "product_id": "rhel-9.3.0.z::baseos:shim-0:15.8-4.el9_3.src" }, "product_reference": "shim-0:15.8-4.el9_3.src", "relates_to_product_reference": "rhel-9.3.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:shim-aa64" }, "product_reference": "shim-aa64", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64-0:15.8-2.el8 as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::baseos:shim-aa64-0:15.8-2.el8" }, "product_reference": "shim-aa64-0:15.8-2.el8", "relates_to_product_reference": "rhel-8.8.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64-0:15.8-2.el8_6 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::baseos:shim-aa64-0:15.8-2.el8_6" }, "product_reference": "shim-aa64-0:15.8-2.el8_6", "relates_to_product_reference": "rhel-8.6.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64-0:15.8-3.el9 as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::baseos:shim-aa64-0:15.8-3.el9" }, "product_reference": "shim-aa64-0:15.8-3.el9", "relates_to_product_reference": "rhel-9.0.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64-0:15.8-3.el9_2 as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus::baseos:shim-aa64-0:15.8-3.el9_2" }, "product_reference": "shim-aa64-0:15.8-3.el9_2", "relates_to_product_reference": "rhel-9.2.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64-0:15.8-4.el8_9 as a component of Red Hat Enterprise Linux 8.9.0.z", "product_id": "rhel-8.9.0.z::baseos:shim-aa64-0:15.8-4.el8_9" }, "product_reference": "shim-aa64-0:15.8-4.el8_9", "relates_to_product_reference": "rhel-8.9.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-aa64-0:15.8-4.el9_3 as a component of Red Hat Enterprise Linux 9.3.0.z", "product_id": "rhel-9.3.0.z::baseos:shim-aa64-0:15.8-4.el9_3" }, "product_reference": "shim-aa64-0:15.8-4.el9_3", "relates_to_product_reference": "rhel-9.3.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:shim-ia32-0:15.8-1.el7" }, "product_reference": "shim-ia32-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:shim-ia32-0:15.8-1.el7" }, "product_reference": "shim-ia32-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:shim-ia32-0:15.8-1.el7" }, "product_reference": "shim-ia32-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:shim-ia32-0:15.8-1.el7" }, "product_reference": "shim-ia32-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8 as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::baseos:shim-ia32-0:15.8-2.el8" }, "product_reference": "shim-ia32-0:15.8-2.el8", "relates_to_product_reference": "rhel-8.8.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_2" }, "product_reference": "shim-ia32-0:15.8-2.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.aus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_2" }, "product_reference": "shim-ia32-0:15.8-2.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.tus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_2" }, "product_reference": "shim-ia32-0:15.8-2.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.e4s::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_4 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_4" }, "product_reference": "shim-ia32-0:15.8-2.el8_4", "relates_to_product_reference": "rhel-8.4.0.z.aus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_4 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_4" }, "product_reference": "shim-ia32-0:15.8-2.el8_4", "relates_to_product_reference": "rhel-8.4.0.z.e4s::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_4 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_4" }, "product_reference": "shim-ia32-0:15.8-2.el8_4", "relates_to_product_reference": "rhel-8.4.0.z.tus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-2.el8_6 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::baseos:shim-ia32-0:15.8-2.el8_6" }, "product_reference": "shim-ia32-0:15.8-2.el8_6", "relates_to_product_reference": "rhel-8.6.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-ia32-0:15.8-4.el8_9 as a component of Red Hat Enterprise Linux 8.9.0.z", "product_id": "rhel-8.9.0.z::baseos:shim-ia32-0:15.8-4.el8_9" }, "product_reference": "shim-ia32-0:15.8-4.el8_9", "relates_to_product_reference": "rhel-8.9.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-signed-0:15.8-1.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:shim-signed-0:15.8-1.el7.src" }, "product_reference": "shim-signed-0:15.8-1.el7.src", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "shim-signed-0:15.8-1.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:shim-signed-0:15.8-1.el7.src" }, "product_reference": "shim-signed-0:15.8-1.el7.src", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim-signed-0:15.8-1.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:shim-signed-0:15.8-1.el7.src" }, "product_reference": "shim-signed-0:15.8-1.el7.src", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "shim-signed-0:15.8-1.el7.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:shim-signed-0:15.8-1.el7.src" }, "product_reference": "shim-signed-0:15.8-1.el7.src", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-aarch64-0:15.8-2.el9 as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9" }, "product_reference": "shim-unsigned-aarch64-0:15.8-2.el9", "relates_to_product_reference": "rhel-9.0.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-aarch64-0:15.8-2.el9.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9.src" }, "product_reference": "shim-unsigned-aarch64-0:15.8-2.el9.src", "relates_to_product_reference": "rhel-9.0.0.z.eus::appstream" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-ia32-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:shim-unsigned-ia32-0:15.8-3.el7" }, "product_reference": "shim-unsigned-ia32-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-ia32-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:shim-unsigned-ia32-0:15.8-3.el7" }, "product_reference": "shim-unsigned-ia32-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-ia32-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:shim-unsigned-ia32-0:15.8-3.el7" }, "product_reference": "shim-unsigned-ia32-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-ia32-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:shim-unsigned-ia32-0:15.8-3.el7" }, "product_reference": "shim-unsigned-ia32-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-2.el8 as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8" }, "product_reference": "shim-unsigned-x64-0:15.8-2.el8", "relates_to_product_reference": "rhel-8.8.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-2.el8.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8.src" }, "product_reference": "shim-unsigned-x64-0:15.8-2.el8.src", "relates_to_product_reference": "rhel-8.8.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-2.el9 as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9" }, "product_reference": "shim-unsigned-x64-0:15.8-2.el9", "relates_to_product_reference": "rhel-9.0.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-2.el9.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9.src" }, "product_reference": "shim-unsigned-x64-0:15.8-2.el9.src", "relates_to_product_reference": "rhel-9.0.0.z.eus::crb" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:shim-unsigned-x64-0:15.8-3.el7" }, "product_reference": "shim-unsigned-x64-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:shim-unsigned-x64-0:15.8-3.el7" }, "product_reference": "shim-unsigned-x64-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:shim-unsigned-x64-0:15.8-3.el7" }, "product_reference": "shim-unsigned-x64-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "shim-unsigned-x64-0:15.8-3.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:shim-unsigned-x64-0:15.8-3.el7" }, "product_reference": "shim-unsigned-x64-0:15.8-3.el7", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::server:shim-x64-0:15.8-1.el7" }, "product_reference": "shim-x64-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::client:shim-x64-0:15.8-1.el7" }, "product_reference": "shim-x64-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::workstation:shim-x64-0:15.8-1.el7" }, "product_reference": "shim-x64-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-1.el7 as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z::computenode:shim-x64-0:15.8-1.el7" }, "product_reference": "shim-x64-0:15.8-1.el7", "relates_to_product_reference": "rhel-7.9.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8 as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus::baseos:shim-x64-0:15.8-2.el8" }, "product_reference": "shim-x64-0:15.8-2.el8", "relates_to_product_reference": "rhel-8.8.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.tus::baseos:shim-x64-0:15.8-2.el8_2" }, "product_reference": "shim-x64-0:15.8-2.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.tus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_2" }, "product_reference": "shim-x64-0:15.8-2.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.e4s::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_2 as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus::baseos:shim-x64-0:15.8-2.el8_2" }, "product_reference": "shim-x64-0:15.8-2.el8_2", "relates_to_product_reference": "rhel-8.2.0.z.aus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_4 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.tus::baseos:shim-x64-0:15.8-2.el8_4" }, "product_reference": "shim-x64-0:15.8-2.el8_4", "relates_to_product_reference": "rhel-8.4.0.z.tus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_4 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.aus::baseos:shim-x64-0:15.8-2.el8_4" }, "product_reference": "shim-x64-0:15.8-2.el8_4", "relates_to_product_reference": "rhel-8.4.0.z.aus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_4 as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_4" }, "product_reference": "shim-x64-0:15.8-2.el8_4", "relates_to_product_reference": "rhel-8.4.0.z.e4s::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-2.el8_6 as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.eus::baseos:shim-x64-0:15.8-2.el8_6" }, "product_reference": "shim-x64-0:15.8-2.el8_6", "relates_to_product_reference": "rhel-8.6.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-3.el9 as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus::baseos:shim-x64-0:15.8-3.el9" }, "product_reference": "shim-x64-0:15.8-3.el9", "relates_to_product_reference": "rhel-9.0.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-3.el9_2 as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus::baseos:shim-x64-0:15.8-3.el9_2" }, "product_reference": "shim-x64-0:15.8-3.el9_2", "relates_to_product_reference": "rhel-9.2.0.z.eus::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-4.el8_9 as a component of Red Hat Enterprise Linux 8.9.0.z", "product_id": "rhel-8.9.0.z::baseos:shim-x64-0:15.8-4.el8_9" }, "product_reference": "shim-x64-0:15.8-4.el8_9", "relates_to_product_reference": "rhel-8.9.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim-x64-0:15.8-4.el9_3 as a component of Red Hat Enterprise Linux 9.3.0.z", "product_id": "rhel-9.3.0.z::baseos:shim-x64-0:15.8-4.el9_3" }, "product_reference": "shim-x64-0:15.8-4.el9_3", "relates_to_product_reference": "rhel-9.3.0.z::baseos" }, { "category": "default_component_of", "full_product_name": { "name": "shim.src as a component of Red Hat Enterprise Linux 8.10", "product_id": "rhel-8.10.0:shim.src" }, "product_reference": "shim.src", "relates_to_product_reference": "rhel-8.10.0" }, { "category": "default_component_of", "full_product_name": { "name": "shim.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:shim.src" }, "product_reference": "shim.src", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "shim.src as a component of Red Hat Enterprise Linux 8.9.0", "product_id": "rhel-8.9.0:shim.src" }, "product_reference": "shim.src", "relates_to_product_reference": "rhel-8.9.0" }, { "category": "default_component_of", "full_product_name": { "name": "shim.src as a component of Red Hat Enterprise Linux 9.4", "product_id": "rhel-9.4.0:shim.src" }, "product_reference": "shim.src", "relates_to_product_reference": "rhel-9.4.0" }, { "category": "default_component_of", "full_product_name": { "name": "shim.src as a component of Red Hat Enterprise Linux 9.3.0", "product_id": "rhel-9.3.0:shim.src" }, "product_reference": "shim.src", "relates_to_product_reference": "rhel-9.3.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-40547", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2023-05-05T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-7.9.z::client:mokutil-debuginfo", "rhel-7.9.z::computenode:mokutil-debuginfo", "rhel-7.9.z::server:mokutil-debuginfo", "rhel-7.9.z::workstation:mokutil-debuginfo", "rhel-8.10.0:shim.src", "rhel-9.4.0:shim.src" ] } ], "notes": [ { "category": "other", "text": "This flaw is only exploitable when the machine is booting UEFI through the network. During startup, before loading a local boot image, Shim checks whether the system is configured to support network booting. If the check succeeds, Shim attempts to load the bootable image from the boot's previously configured server using the HTTP protocol, which exposes the system to the vulnerability described by this CVE.", "title": "Statement" }, { "category": "description", "text": "A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise. This flaw is only exploitable during the early boot phase, an attacker needs to perform a Man-in-the-Middle or compromise the boot server to be able to exploit this vulnerability successfully.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "rhel-7.9.z::client:mokutil-0:15.8-1.el7", "rhel-7.9.z::client:shim-0:15.8-3.el7.src", "rhel-7.9.z::client:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::client:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::client:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::client:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::client:shim-x64-0:15.8-1.el7", "rhel-7.9.z::computenode:mokutil-0:15.8-1.el7", "rhel-7.9.z::computenode:shim-0:15.8-3.el7.src", "rhel-7.9.z::computenode:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::computenode:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::computenode:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-x64-0:15.8-1.el7", "rhel-7.9.z::server:mokutil-0:15.8-1.el7", "rhel-7.9.z::server:shim-0:15.8-3.el7.src", "rhel-7.9.z::server:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::server:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::server:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::server:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::server:shim-x64-0:15.8-1.el7", "rhel-7.9.z::workstation:mokutil-0:15.8-1.el7", "rhel-7.9.z::workstation:shim-0:15.8-3.el7.src", "rhel-7.9.z::workstation:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::workstation:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::workstation:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-x64-0:15.8-1.el7", "rhel-8.2.0.z.aus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.aus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.4.0.z.aus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.aus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.eus:shim", "rhel-8.4.0.z.eus:shim-aa64", "rhel-8.4.0.z.tus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.tus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.6.0.z.aus:shim", "rhel-8.6.0.z.eus::baseos:shim-0:15.8-2.el8_6.src", "rhel-8.6.0.z.eus::baseos:shim-aa64-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-ia32-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-x64-0:15.8-2.el8_6", "rhel-8.8.0.z.eus::baseos:shim-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-aa64-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-ia32-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8.src", "rhel-8.9.0.z::baseos:shim-0:15.8-4.el8_9.src", "rhel-8.9.0.z::baseos:shim-aa64-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-ia32-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-x64-0:15.8-4.el8_9", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9.src", "rhel-9.0.0.z.eus::baseos:shim-0:15.8-3.el9.src", "rhel-9.0.0.z.eus::baseos:shim-aa64-0:15.8-3.el9", "rhel-9.0.0.z.eus::baseos:shim-x64-0:15.8-3.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9.src", "rhel-9.2.0.z.eus::baseos:shim-0:15.8-3.el9_2.src", "rhel-9.2.0.z.eus::baseos:shim-aa64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus::baseos:shim-x64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus:shim", "rhel-9.3.0.z::baseos:shim-0:15.8-4.el9_3.src", "rhel-9.3.0.z::baseos:shim-aa64-0:15.8-4.el9_3", "rhel-9.3.0.z::baseos:shim-x64-0:15.8-4.el9_3" ], "known_affected": [ "rhel-8.1.0.z:shim.src", "rhel-8.9.0:shim.src", "rhel-9.3.0:shim.src" ], "known_not_affected": [ "rhel-7.9.z::client:mokutil-debuginfo", "rhel-7.9.z::computenode:mokutil-debuginfo", "rhel-7.9.z::server:mokutil-debuginfo", "rhel-7.9.z::workstation:mokutil-debuginfo", "rhel-8.10.0:shim.src", "rhel-9.4.0:shim.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-40547" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40547" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-40547" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-8.1.0.z:shim.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-8.9.0:shim.src", "rhel-9.3.0:shim.src" ] }, { "category": "vendor_fix", "date": "2024-04-23T01:00:12+00:00", "details": "Apply advisory RHSA-2024:1959 as per vendors instructions.", "product_ids": [ "rhel-7.9.z::client:mokutil-0:15.8-1.el7", "rhel-7.9.z::client:shim-0:15.8-3.el7.src", "rhel-7.9.z::client:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::client:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::client:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::client:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::client:shim-x64-0:15.8-1.el7", "rhel-7.9.z::computenode:mokutil-0:15.8-1.el7", "rhel-7.9.z::computenode:shim-0:15.8-3.el7.src", "rhel-7.9.z::computenode:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::computenode:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::computenode:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-x64-0:15.8-1.el7", "rhel-7.9.z::server:mokutil-0:15.8-1.el7", "rhel-7.9.z::server:shim-0:15.8-3.el7.src", "rhel-7.9.z::server:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::server:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::server:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::server:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::server:shim-x64-0:15.8-1.el7", "rhel-7.9.z::workstation:mokutil-0:15.8-1.el7", "rhel-7.9.z::workstation:shim-0:15.8-3.el7.src", "rhel-7.9.z::workstation:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::workstation:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::workstation:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-x64-0:15.8-1.el7" ], "url": "https://access.redhat.com/errata/RHSA-2024:1959" }, { "category": "vendor_fix", "date": "2024-04-16T13:45:47+00:00", "details": "Apply advisory RHSA-2024:1835 as per vendors instructions.", "product_ids": [ "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9.src", "rhel-9.0.0.z.eus::baseos:shim-0:15.8-3.el9.src", "rhel-9.0.0.z.eus::baseos:shim-aa64-0:15.8-3.el9", "rhel-9.0.0.z.eus::baseos:shim-x64-0:15.8-3.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9.src" ], "url": "https://access.redhat.com/errata/RHSA-2024:1835" }, { "category": "vendor_fix", "date": "2024-04-18T01:56:22+00:00", "details": "Apply advisory RHSA-2024:1883 as per vendors instructions.", "product_ids": [ "rhel-8.8.0.z.eus::baseos:shim-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-aa64-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-ia32-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8.src" ], "url": "https://access.redhat.com/errata/RHSA-2024:1883" }, { "category": "vendor_fix", "date": "2024-04-18T01:47:33+00:00", "details": "Apply advisory RHSA-2024:1876 as per vendors instructions.", "product_ids": [ "rhel-9.2.0.z.eus::baseos:shim-0:15.8-3.el9_2.src", "rhel-9.2.0.z.eus::baseos:shim-aa64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus::baseos:shim-x64-0:15.8-3.el9_2" ], "url": "https://access.redhat.com/errata/RHSA-2024:1876" }, { "category": "vendor_fix", "date": "2024-04-16T13:38:02+00:00", "details": "Apply advisory RHSA-2024:1834 as per vendors instructions.", "product_ids": [ "rhel-8.2.0.z.aus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.aus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-x64-0:15.8-2.el8_2" ], "url": "https://access.redhat.com/errata/RHSA-2024:1834" }, { "category": "vendor_fix", "date": "2024-04-18T01:42:32+00:00", "details": "Apply advisory RHSA-2024:1873 as per vendors instructions.", "product_ids": [ "rhel-8.4.0.z.aus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.aus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.tus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.tus::baseos:shim-x64-0:15.8-2.el8_4" ], "url": "https://access.redhat.com/errata/RHSA-2024:1873" }, { "category": "vendor_fix", "date": "2024-04-29T12:31:44+00:00", "details": "Apply advisory RHSA-2024:2086 as per vendors instructions.", "product_ids": [ "rhel-8.6.0.z.eus::baseos:shim-0:15.8-2.el8_6.src", "rhel-8.6.0.z.eus::baseos:shim-aa64-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-ia32-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-x64-0:15.8-2.el8_6" ], "url": "https://access.redhat.com/errata/RHSA-2024:2086" }, { "category": "vendor_fix", "date": "2024-04-18T17:44:10+00:00", "details": "Apply advisory RHSA-2024:1902 as per vendors instructions.", "product_ids": [ "rhel-8.9.0.z::baseos:shim-0:15.8-4.el8_9.src", "rhel-8.9.0.z::baseos:shim-aa64-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-ia32-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-x64-0:15.8-4.el8_9" ], "url": "https://access.redhat.com/errata/RHSA-2024:1902" }, { "category": "vendor_fix", "date": "2024-04-18T17:42:35+00:00", "details": "Apply advisory RHSA-2024:1903 as per vendors instructions.", "product_ids": [ "rhel-9.3.0.z::baseos:shim-0:15.8-4.el9_3.src", "rhel-9.3.0.z::baseos:shim-aa64-0:15.8-4.el9_3", "rhel-9.3.0.z::baseos:shim-x64-0:15.8-4.el9_3" ], "url": "https://access.redhat.com/errata/RHSA-2024:1903" }, { "category": "workaround", "details": "If a system isn’t required to boot from the network, configure the server’s boot order to disable entirely or skip the network boot.", "product_ids": [ "rhel-8.1.0.z:shim.src", "rhel-8.9.0:shim.src", "rhel-9.3.0:shim.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.3, "baseSeverity": "HIGH" }, "products": [ "rhel-7.9.z::client:mokutil-0:15.8-1.el7", "rhel-7.9.z::client:mokutil-debuginfo", "rhel-7.9.z::client:shim-0:15.8-3.el7.src", "rhel-7.9.z::client:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::client:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::client:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::client:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::client:shim-x64-0:15.8-1.el7", "rhel-7.9.z::computenode:mokutil-0:15.8-1.el7", "rhel-7.9.z::computenode:mokutil-debuginfo", "rhel-7.9.z::computenode:shim-0:15.8-3.el7.src", "rhel-7.9.z::computenode:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::computenode:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::computenode:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-x64-0:15.8-1.el7", "rhel-7.9.z::server:mokutil-0:15.8-1.el7", "rhel-7.9.z::server:mokutil-debuginfo", "rhel-7.9.z::server:shim-0:15.8-3.el7.src", "rhel-7.9.z::server:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::server:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::server:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::server:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::server:shim-x64-0:15.8-1.el7", "rhel-7.9.z::workstation:mokutil-0:15.8-1.el7", "rhel-7.9.z::workstation:mokutil-debuginfo", "rhel-7.9.z::workstation:shim-0:15.8-3.el7.src", "rhel-7.9.z::workstation:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::workstation:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::workstation:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-x64-0:15.8-1.el7", "rhel-8.1.0.z:shim.src", "rhel-8.10.0:shim.src", "rhel-8.2.0.z.aus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.aus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.4.0.z.aus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.aus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.eus:shim", "rhel-8.4.0.z.eus:shim-aa64", "rhel-8.4.0.z.tus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.tus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.6.0.z.aus:shim", "rhel-8.6.0.z.eus::baseos:shim-0:15.8-2.el8_6.src", "rhel-8.6.0.z.eus::baseos:shim-aa64-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-ia32-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-x64-0:15.8-2.el8_6", "rhel-8.8.0.z.eus::baseos:shim-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-aa64-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-ia32-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8.src", "rhel-8.9.0.z::baseos:shim-0:15.8-4.el8_9.src", "rhel-8.9.0.z::baseos:shim-aa64-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-ia32-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-x64-0:15.8-4.el8_9", "rhel-8.9.0:shim.src", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9.src", "rhel-9.0.0.z.eus::baseos:shim-0:15.8-3.el9.src", "rhel-9.0.0.z.eus::baseos:shim-aa64-0:15.8-3.el9", "rhel-9.0.0.z.eus::baseos:shim-x64-0:15.8-3.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9.src", "rhel-9.2.0.z.eus::baseos:shim-0:15.8-3.el9_2.src", "rhel-9.2.0.z.eus::baseos:shim-aa64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus::baseos:shim-x64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus:shim", "rhel-9.3.0.z::baseos:shim-0:15.8-4.el9_3.src", "rhel-9.3.0.z::baseos:shim-aa64-0:15.8-4.el9_3", "rhel-9.3.0.z::baseos:shim-x64-0:15.8-4.el9_3", "rhel-9.3.0:shim.src", "rhel-9.4.0:shim.src" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "rhel-7.9.z::client:mokutil-0:15.8-1.el7", "rhel-7.9.z::client:mokutil-debuginfo", "rhel-7.9.z::client:shim-0:15.8-3.el7.src", "rhel-7.9.z::client:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::client:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::client:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::client:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::client:shim-x64-0:15.8-1.el7", "rhel-7.9.z::computenode:mokutil-0:15.8-1.el7", "rhel-7.9.z::computenode:mokutil-debuginfo", "rhel-7.9.z::computenode:shim-0:15.8-3.el7.src", "rhel-7.9.z::computenode:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::computenode:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::computenode:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::computenode:shim-x64-0:15.8-1.el7", "rhel-7.9.z::server:mokutil-0:15.8-1.el7", "rhel-7.9.z::server:mokutil-debuginfo", "rhel-7.9.z::server:shim-0:15.8-3.el7.src", "rhel-7.9.z::server:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::server:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::server:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::server:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::server:shim-x64-0:15.8-1.el7", "rhel-7.9.z::workstation:mokutil-0:15.8-1.el7", "rhel-7.9.z::workstation:mokutil-debuginfo", "rhel-7.9.z::workstation:shim-0:15.8-3.el7.src", "rhel-7.9.z::workstation:shim-ia32-0:15.8-1.el7", "rhel-7.9.z::workstation:shim-signed-0:15.8-1.el7.src", "rhel-7.9.z::workstation:shim-unsigned-ia32-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-unsigned-x64-0:15.8-3.el7", "rhel-7.9.z::workstation:shim-x64-0:15.8-1.el7", "rhel-8.1.0.z:shim.src", "rhel-8.10.0:shim.src", "rhel-8.2.0.z.aus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.aus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-0:15.8-2.el8_2.src", "rhel-8.2.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_2", "rhel-8.2.0.z.tus::baseos:shim-x64-0:15.8-2.el8_2", "rhel-8.4.0.z.aus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.aus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.aus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.e4s::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.e4s::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.4.0.z.eus:shim", "rhel-8.4.0.z.eus:shim-aa64", "rhel-8.4.0.z.tus::baseos:shim-0:15.8-2.el8_4.src", "rhel-8.4.0.z.tus::baseos:shim-ia32-0:15.8-2.el8_4", "rhel-8.4.0.z.tus::baseos:shim-x64-0:15.8-2.el8_4", "rhel-8.6.0.z.aus:shim", "rhel-8.6.0.z.eus::baseos:shim-0:15.8-2.el8_6.src", "rhel-8.6.0.z.eus::baseos:shim-aa64-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-ia32-0:15.8-2.el8_6", "rhel-8.6.0.z.eus::baseos:shim-x64-0:15.8-2.el8_6", "rhel-8.8.0.z.eus::baseos:shim-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-aa64-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-ia32-0:15.8-2.el8", "rhel-8.8.0.z.eus::baseos:shim-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8", "rhel-8.8.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el8.src", "rhel-8.9.0.z::baseos:shim-0:15.8-4.el8_9.src", "rhel-8.9.0.z::baseos:shim-aa64-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-ia32-0:15.8-4.el8_9", "rhel-8.9.0.z::baseos:shim-x64-0:15.8-4.el8_9", "rhel-8.9.0:shim.src", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9", "rhel-9.0.0.z.eus::appstream:shim-unsigned-aarch64-0:15.8-2.el9.src", "rhel-9.0.0.z.eus::baseos:shim-0:15.8-3.el9.src", "rhel-9.0.0.z.eus::baseos:shim-aa64-0:15.8-3.el9", "rhel-9.0.0.z.eus::baseos:shim-x64-0:15.8-3.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9", "rhel-9.0.0.z.eus::crb:shim-unsigned-x64-0:15.8-2.el9.src", "rhel-9.2.0.z.eus::baseos:shim-0:15.8-3.el9_2.src", "rhel-9.2.0.z.eus::baseos:shim-aa64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus::baseos:shim-x64-0:15.8-3.el9_2", "rhel-9.2.0.z.eus:shim", "rhel-9.3.0.z::baseos:shim-0:15.8-4.el9_3.src", "rhel-9.3.0.z::baseos:shim-aa64-0:15.8-4.el9_3", "rhel-9.3.0.z::baseos:shim-x64-0:15.8-4.el9_3", "rhel-9.3.0:shim.src", "rhel-9.4.0:shim.src" ] } ], "title": "RCE in http boot support may lead to Secure Boot bypass" } ] }