ESSA-2025:0001: Moderate: SUSE Liberty Linux security update for shim-signed from RHSA-2024:1959

[Update Advisories for SUSE Liberty Linux]

# security update for shim-signed from RHSA-2024:1959

Announcement ID: ESSA-2025:0001
Rating: Moderate

Cross-References:

  * CVE-2023-40546
  * CVE-2023-40547
  * CVE-2023-40548
  * CVE-2023-40549
  * CVE-2023-40550
  * CVE-2023-40551



CVSS scores:

  * CVE-2023-40546 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-40547 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
  * CVE-2023-40548 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-40549 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-40550 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
  * CVE-2023-40551 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected Products:

  * SUSE Liberty Linux 7 LTSS


An update that solves 6 vulnerabilities can now be installed.

## Description:

This security update provides a functional equivalent of RHSA-2024:1959. The original RedHat(R) advisory is available from the RedHat web site at https://access.redhat.com/errata/RHSA-2024:1959

## Package List:

  * SUSE Liberty Linux 7 LTSS:
    * mokutil 15.8-2.el7
    * shim-ia32 15.8-2.el7
    * shim-x64 15.8-2.el7

## References:

  * https://www.suse.com/security/cve/CVE-2023-40546.html
  * https://www.suse.com/security/cve/CVE-2023-40547.html
  * https://www.suse.com/security/cve/CVE-2023-40548.html
  * https://www.suse.com/security/cve/CVE-2023-40549.html
  * https://www.suse.com/security/cve/CVE-2023-40550.html
  * https://www.suse.com/security/cve/CVE-2023-40551.html