[Bug 1996503] Update Released

[Łukasz Zemczak]

The verification of the Stable Release Update for shim has completed
successfully and the package is now being released to -updates.
Subsequently, the Ubuntu Stable Release Updates Team is being
unsubscribed and will not receive messages about this bug report.  In
the event that you encounter a regression using the package from
-updates please report a new bug using ubuntu-bug and tag the bug report
regression-update so we can easily find any regressions.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1996503

Title:
  shim 15.7-0ubuntu1

Status in shim package in Ubuntu:
  In Progress
Status in shim-signed package in Ubuntu:
  In Progress
Status in shim source package in Bionic:
  Fix Committed
Status in shim-signed source package in Bionic:
  Fix Committed
Status in shim source package in Focal:
  Fix Committed
Status in shim-signed source package in Focal:
  Fix Committed
Status in shim source package in Jammy:
  Fix Committed
Status in shim-signed source package in Jammy:
  Fix Committed
Status in shim source package in Kinetic:
  Fix Released
Status in shim-signed source package in Kinetic:
  Fix Released

Bug description:
  [Impact]
  New upstream release; shim security update CVE-2022-28737

  [Test plan]
  https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess/TestPlan

  [Where problems could occur]
  Machines could become unbootable due to bugs as usual.

  Key rotations that require newer kernels can't enforce newer kernels
  being on the system prior to updates resulting in unbootable systems
  if kernels are not available.

  Requires the grub2-unsigned >= 2.04-1ubuntu47.4, >= 2.06-2ubuntu10 to be
  published to security and on each machine first too. Maybe should add Breaks to those (though you can set 'latest' policy and it would require upcoming grub uploads, so not _entirely_ useful).

  Also breaks fwupd.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1996503/+subscriptions