Your message dated Sat, 11 Jul 2026 10:32:49 +0000
with message-id <[email protected]>
and subject line Released in 13.6
has caused the Debian Bug report #1140760,
regarding trixie-pu: package shim-signed/1.51~1+deb13u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1140760: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140760
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: [email protected]
Control: affects -1 + src:shim-signed
User: [email protected]
Usertags: pu
Hey folks,
As mentioned in #1131861...
We've had new signed shim binaries back from Microsoft for some
time. I've been waiting on the fix for #1137247 (hang/crash
chainloading Windows from grub) in case that might have been shim bug,
but it's now been fixed in grub and we're good.
So, it's time to get a new shim-signed package into trixie. I've
backported the logic from 1.51 in unstable:
* Add support for verifying and then combining signatures from
multiple signed shims.
+ Existing sbverify versions in Debian are buggy when verifying.
+ Switch to using a python script verify_combine_sigs to fill in
the gaps.
* In preinst, try to verify that the signed shim we're trying to
install will actually boot on this system - let's not break
systems on upgrade.
and imported the signed shim binaries which resulted from the trixie
shim update in #1131861.
We need this new signed shim to allowe trixie to install and run on
newer systems which may ship with *only* the new 2023 UEFI CA included
in firmware.
See https://wiki.debian.org/SecureBoot/CAChanges for more background.
--- End Message ---
--- Begin Message ---
Version: 13.6
This update was released as part of 13.6.
--- End Message ---
