[Bug 1862171] Re: [SRU] shim 15+1552672080.a4a1fbe-0ubuntu2

[Launchpad Bug Tracker]

This bug was fixed in the package shim-signed - 1.37~18.04.8

---------------
shim-signed (1.37~18.04.8) bionic; urgency=medium

  * Followup fix to actually include the updated shimx64.efi (LP: #1862171),
    as the previous upload accidentally only contained an updated shimaa64.efi

shim-signed (1.37~18.04.7) bionic; urgency=medium

  * Build shim-signed:arm64 (LP: #1890813)
  * Update to the signed 15+1552672080.a4a1fbe-0ubuntu2 binary from Microsoft.
    (LP: #1862171)

 -- Julian Andres Klode <juliank at ubuntu.com>  Thu, 27 Aug 2020 13:32:46
+0200

** Changed in: shim-signed (Ubuntu Bionic)
       Status: Fix Committed => Fix Released

** Changed in: shim-signed (Ubuntu Xenial)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1862171

Title:
  [SRU] shim 15+1552672080.a4a1fbe-0ubuntu2

Status in shim package in Ubuntu:
  Fix Released
Status in shim-signed package in Ubuntu:
  Fix Released
Status in shim source package in Xenial:
  Fix Committed
Status in shim-signed source package in Xenial:
  Fix Released
Status in shim source package in Bionic:
  Fix Committed
Status in shim-signed source package in Bionic:
  Fix Released
Status in shim source package in Focal:
  Fix Committed
Status in shim-signed source package in Focal:
  Fix Released
Status in shim source package in Groovy:
  Fix Released
Status in shim-signed source package in Groovy:
  Fix Released

Bug description:
  [Impact]
  New shim, various upstream fixes, fixes support for ARM64, also see bionic arm64 SRU bug: LP: #1890813.

  [Test case]

  Roughly

  https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess/TestPlan

  but I certainly don't have any clue about the maas one.

  [Regression potential]
  - System might not boot anymore
  - System might not boot some helpers like fwupd anymore (which was a regression in ubuntu1 we fixed)
  - New security bugs that make shim load unsigned stuff are of course possible too

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1862171/+subscriptions