StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · shim

`shim` CVE matrix across Linux distros

21 CVEs tracked across 3 distro releases. Showing the 21 most-recent fix records.

Ecosystems with tracked fixes

Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2022-28737→ fixed in15.6-1~deb11u1
CVE-2023-40546→ fixed in15.8-1~deb11u1
CVE-2023-40547→ fixed in15.8-1~deb11u1
CVE-2023-40548→ fixed in15.8-1~deb11u1
CVE-2023-40549→ fixed in15.8-1~deb11u1
CVE-2023-40550→ fixed in15.8-1~deb11u1
CVE-2023-40551→ fixed in15.8-1~deb11u1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y shim

Debian bookworm

Source: Debian

CVE-2022-28737→ fixed in15.6-1
CVE-2023-40546→ fixed in15.8-1~deb12u1
CVE-2023-40547→ fixed in15.8-1~deb12u1
CVE-2023-40548→ fixed in15.8-1~deb12u1
CVE-2023-40549→ fixed in15.8-1~deb12u1
CVE-2023-40550→ fixed in15.8-1~deb12u1
CVE-2023-40551→ fixed in15.8-1~deb12u1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y shim

Debian trixie

Source: Debian

CVE-2022-28737→ fixed in15.6-1
CVE-2023-40546→ fixed in15.8-1
CVE-2023-40547→ fixed in15.8-1
CVE-2023-40548→ fixed in15.8-1
CVE-2023-40549→ fixed in15.8-1
CVE-2023-40550→ fixed in15.8-1
CVE-2023-40551→ fixed in15.8-1

Single command to patch all of these:

sudo apt-get install --only-upgrade -y shim

Is YOUR shim patched?

5-second check on your actual server. The quickscan reads your installed shim version and matches against the same 21-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)