Fedora Linux-utvecklarna har f\u00f6rtydligat situationen kring utg\u00e5ngen av Microsofts certifikat i slutet av juni, vilket anv\u00e4nds f\u00f6r att signera Shim-lagret som anv\u00e4nds f\u00f6r verifierad installation av Linux-distributioner med UEFI Secure Boot. \u00d6verg\u00e5ngen till det nya certifikatet ska ske utan att anv\u00e4ndarna m\u00e4rker n\u00e5got, eftersom det faktiska utg\u00e5ngen av certifikatets livsl\u00e4ngd endast g\u00f6r att det inte l\u00e4ngre kan anv\u00e4ndas f\u00f6r att skapa nya signaturer. Under UEFI Secure Boot kontrolleras inte certifikatets giltighet och det har endast betydelse f\u00f6r \u00e5terkallande av komprometterade certifikat. <\/p>\n
Befintliga system utan installation av shim-uppdateringen kommer att forts\u00e4tta att starta s\u00e5 l\u00e4nge den offentliga nyckeln f\u00f6r certifikatet inte tas bort fr\u00e5n firmware eller inte l\u00e4ggs till i listan \u00f6ver \u00e5terkallade certifikat i UEFI (DBX). Endast shim-lagret som anv\u00e4nds f\u00f6r att starta godk\u00e4nns av Microsoft, d\u00e4r den offentliga nyckeln f\u00f6r distributionen finns f\u00f6r att signera de komponenter som laddas, s\u00e5som bootloadern GRUB2, Linux-k\u00e4rnan, k\u00e4rnmoduler och processer som anv\u00e4nds vid uppstart, s\u00e5som fwupd. Denna metod m\u00f6jligg\u00f6r f\u00f6r Microsoft att endast godk\u00e4nna \u00e4ndringar i shim-lagret och sj\u00e4lva s\u00e4kerst\u00e4lla verifieringen av installationsprocessen f\u00f6r distributionen.<\/p>\n
Microsofts certifikat f\u00f6r att signera tredjepartsfirmware f\u00f6r UEFI Secure Boot har varit giltigt sedan 2011. \u00c5r 2023 ersattes det med ett nytt certifikat som kommer att anv\u00e4ndas f\u00f6r att generera signaturer fr\u00e5n oktober 2025. Det uppdaterade shim-lagret har redan lagts till i Fedora Rawhide-repositoriet, som ligger till grund f\u00f6r Fedora 45-utg\u00e5van, och \u00e4r signerat med flera nycklar f\u00f6r att s\u00e4kerst\u00e4lla maximal kompatibilitet med h\u00e5rdvaran (det kan anv\u00e4ndas b\u00e5de med gamla firmware utan den offentliga nyckeln f\u00f6r det nya certifikatet och med firmware utan den offentliga nyckeln f\u00f6r det gamla certifikatet).<\/p>\n
Trots att utg\u00e5ngen av Microsofts certifikat inte b\u00f6r p\u00e5verka driftsf\u00f6rm\u00e5gan vid start, rekommenderar Fedora-utvecklarna anv\u00e4ndare att uppdatera databasen med nycklar f\u00f6r Secure Boot n\u00e4r nya versioner av firmware f\u00f6r deras h\u00e5rdvara blir tillg\u00e4ngliga. F\u00f6r att avg\u00f6ra om systemet har startats i UEFI Secure Boot-l\u00e4ge kan kommandot \u00abmokutil \u2014sb-state\u00bb anv\u00e4ndas, och f\u00f6r att visa listan \u00f6ver de \u00f6ppna nycklar som finns i firmware \u2014 \u00abmokutil \u2014db \u2014short\u00bb. F\u00f6r att visa nycklarna som har signerat shim-lagret kan kommandot \u00absudo pesign -S -i \/boot\/efi\/EFI\/fedora\/shimx64.efi\u00bb k\u00f6ras, efter att ha installerat paketet pesign. F\u00f6r att kontrollera om det finns en firmwareuppdatering och installera den kan kommandot \u00absudo fwupdmgr update\u00bb anv\u00e4ndas. <\/p>\n
Den n\u00e4sta versionen av shim-lagret kommer endast att signeras med det nya Microsoft-certifikatet, och firmwareuppdatering \u00e4r n\u00f6dv\u00e4ndig f\u00f6r att f\u00f6rbereda sina system f\u00f6r denna f\u00f6r\u00e4ndring. Uppdateringen av shim kommer att sl\u00e4ppas om s\u00e5rbarheter eller allvarliga fel uppt\u00e4cks, vilket kan ske b\u00e5de efter en m\u00e5nad och efter ett \u00e5r. Under shim:s existens i projektet har kritiska s\u00e5rbarheter identifierats, och den senaste rapporten om s\u00e4kerhetsproblem i shim publicerades bara f\u00f6r n\u00e5gra dagar sedan. <\/p>\n
Rapporten n\u00e4mner tv\u00e5 nyligen identifierade s\u00e5rbarheter CVE-2026-8863 och \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Fedora Linux \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 Shim, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 UEFI Secure Boot. \u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0439\u0442\u0438 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0442\u0430\u043a \u043a\u0430\u043a \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043b\u0438\u0448\u044c \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182058","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tiden f\u00f6r livsl\u00e4ngden f\u00f6r certifikatet som signerar bootloadern f\u00f6r UEFI Secure Boot i Linux-distributioner g\u00e5r ut | ProHoster","description":"Fedora Linux-utvecklarna har klargjort situationen kring utg\u00e5ngen av Microsoft-certifikatet, som g\u00e5r ut i slutet av juni, vilket anv\u00e4nds f\u00f6r att signera shim-lagret som anv\u00e4nds f\u00f6r verifierad.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/istekaet-vremya-zhizni-sertifikata-kotorym-zaveren-zagruzchik-dlya-uefi-secure-boot-v-distributivah-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0437\u0430\u0432\u0435\u0440\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0434\u043b\u044f UEFI Secure Boot \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Fedora Linux \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 Shim, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/istekaet-vremya-zhizni-sertifikata-kotorym-zaveren-zagruzchik-dlya-uefi-secure-boot-v-distributivah-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-14T12:48:27+00:00","article:modified_time":"2026-06-14T12:48:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182058","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:23","updated":"2026-08-05 12:22:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/182058","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=182058"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/182058\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=182058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=182058"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=182058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nCVE-2026-10797, som m\u00f6jligg\u00f6r exekvering av egen kod i ett tidigt skede av uppstarten f\u00f6re \u00f6verf\u00f6ringen av kontrollen till operativsystemet, f\u00f6r att kringg\u00e5 UEFI Secure Boot-skyddet och m\u00f6jligg\u00f6ra uppstart av komponenter i k\u00e4rnan som inte \u00e4r signerade med digital signatur. Problemen p\u00e5verkar versioner av shim fram till och med version 0.9, som skapades f\u00f6re 2016. Mycket gamla system \u00e4r utsatta f\u00f6r attack, s\u00e5som
\n RedHat Enterprise Linux 7.2, CentOS 7.2, Oracle Linux 7.2, ROSA Linux R10\\\/R9 och openSUSE med shim 0.9. Shim-lager fram till och med version 0.9 har lagts till i databasen f\u00f6r \u00e5terkallade digitala signaturer DBX (UEFI Forbidden Signature Database), och i h\u00e4ndelse av en DBX-uppdatering kan de inte anv\u00e4ndas f\u00f6r att starta i UEFI Secure Boot-l\u00e4ge.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"