{"id":"CLSA-2025-1742806677","summary":"shim: Fix of 4 CVEs","details":"- Make this package installable only on a system having a either\n  Almalinux or Cloudlinux signed kernel\n- Update to shim-15.8 and fix the following CVEs:\n  Resolves: CVE-2023-40546\n  Resolves: CVE-2023-40547\n  Resolves: СVE-2023-40548\n  Resolves: СVE-2023-40549\n  Resolves: CVE-2023-40550\n  Resolves: CVE-2023-40551","modified":"2026-05-27T11:16:30.459541405Z","published":"2025-03-24T08:58:03Z","upstream":["CVE-2023-40546","CVE-2023-40547","CVE-2023-40550","CVE-2023-40551"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1742806677.html"}],"affected":[{"package":{"name":"shim-x64","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/shim-x64?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.8-1.el9.alma.1.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1742806677.json"}}],"schema_version":"1.7.5"}