Ah, indeed, the "broken" one isn't even in the archive anymore, so there is nothing I can upgrade to:
$ apt-cache policy shim shim-signed shim: Installed: 15+1552672080.a4a1fbe-0ubuntu1 Candidate: 15+1552672080.a4a1fbe-0ubuntu1 Version table: *** 15+1552672080.a4a1fbe-0ubuntu1 100 100 /var/lib/dpkg/status 15+1533136590.3beb971-0ubuntu1 500 500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages shim-signed: Installed: 1.41+15+1552672080.a4a1fbe-0ubuntu1 Candidate: 1.41+15+1552672080.a4a1fbe-0ubuntu1 Version table: *** 1.41+15+1552672080.a4a1fbe-0ubuntu1 100 100 /var/lib/dpkg/status 1.40.3+15+1533136590.3beb971-0ubuntu1 500 500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1864223 Title: shim 15+1552672080.a4a1fbe-0ubuntu1 fails to load fwupd To manage notifications about this bug go to: https://bugs.launchpad.net/oem-priority/+bug/1864223/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs