[Bug 1890410] [NEW] grub2-signed managed to pull old signature, despite build-dep on new debs

[Dimitri John Ledkov]

Public bug reported:

grub2-signed managed to pull old signature, despite build-dep on newer
version number.

I think grub2-signed should execute comparison of authenticodes of
grub.efi binaries in /usr with those that got downloaded, similar to how
shim-signed builds do it.

** Affects: grub2-signed (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-signed in Ubuntu.
https://bugs.launchpad.net/bugs/1890410

Title:
  grub2-signed managed to pull old signature, despite build-dep on new
  debs

Status in grub2-signed package in Ubuntu:
  New

Bug description:
  grub2-signed managed to pull old signature, despite build-dep on newer
  version number.

  I think grub2-signed should execute comparison of authenticodes of
  grub.efi binaries in /usr with those that got downloaded, similar to
  how shim-signed builds do it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-signed/+bug/1890410/+subscriptions