-
shim-signed (1.39~1+deb11u1) bullseye; urgency=medium
* Build against new signed binaries corresponding to 15.7-1~deb11u1
Pulls multiple bugfixes in for the signed version:
+ Make sbat_var.S parse right with buggy gcc/binutils
+ Enable NX support at build time, as required by policy for signing
new shim binaries.
* Update build-dep on shim-unsigned to use 15.7-1~deb11u1
* Block Debian grub binaries with sbat < 4 (see #1024617)
+ Update Depends on grub2-common to match.
* postinst/postrm: make config_item() more robust
-- Steve McIntyre <email address hidden> Wed, 08 Mar 2023 22:48:46 +0000
-
shim-signed (1.38) unstable; urgency=medium
* Tweak how we call grub-install; don't abort on error. Not ideal
behaviour either, but don't break upgrades. Copy the behaviour
from the grub packages here. Closes: #990984
* Update build-dep on shim-unsigned to use 15.4-7
-- Steve McIntyre <email address hidden> Mon, 12 Jul 2021 12:46:52 +0100
-
shim-signed (1.37) unstable; urgency=medium
* Build against new signed binaries corresponding to 15.4-6
Pulls multiple bugfixes in for the signed version:
+ Add arm64 patch to tweak section layout and stop crashing
problems. Upstream issue #371. (#990082, #990190)
+ In insecure mode, don't abort if we can't create the MokListXRT
variable. Upstream issue #372. (#989962, #990158)
* Update build-dep on shim-unsigned to use 15.4-6
-- Steve McIntyre <email address hidden> Tue, 29 Jun 2021 09:26:20 +0100
