Re: SBAT revocation. Do we need a 12.6.1 release? (Was: Heads-up: Verifying shim SBAT data failed: Security Policy Violation)

To: debian-boot@lists.debian.org
Subject: Re: SBAT revocation. Do we need a 12.6.1 release? (Was: Heads-up: Verifying shim SBAT data failed: Security Policy Violation)
From: Roland Clobus <rclobus@rclobus.nl>
Date: Wed, 3 Jul 2024 18:31:39 +0200
Message-id: <[🔎] e48335a1-cd44-4d48-9db0-cb3454400dc1@rclobus.nl>
In-reply-to: <[🔎] 93a12a2e-5aa4-49bf-80f6-cabf6af6f1be@rclobus.nl>
References: <20240628094944.ddo6hhqtsbx7edfx@mraw.org> <20240628105229.c46fvhywvhe7hq6t@mraw.org> <[🔎] 8ee81cc6-6b60-437e-ba98-c5fc50f57751@rclobus.nl> <[🔎] 3ebcbf11-f029-44a3-8209-f4fae4c59a65@plouf.fr.eu.org> <[🔎] 93a12a2e-5aa4-49bf-80f6-cabf6af6f1be@rclobus.nl>

On 03/07/2024 18:21, Roland Clobus wrote:

Thanks! That did the trick, it shows one offending entry, which causesthis issue: grub,3 (see screenshot)

Oops. Actually, it is shim which causes the issue, as the screenshotshows that shim has version 3, and at least version 4 is required.

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply to:

Follow-Ups:
- Re: SBAT revocation. Do we need a 12.6.1 release? (Was: Heads-up: Verifying shim SBAT data failed: Security Policy Violation)
  - From: Steve McIntyre <steve@einval.com>

References:
- Re: Heads-up: Verifying shim SBAT data failed: Security Policy Violation
  - From: Roland Clobus <rclobus@rclobus.nl>
- Re: Heads-up: Verifying shim SBAT data failed: Security Policy Violation
  - From: Pascal Hambourg <pascal@plouf.fr.eu.org>
- Re: SBAT revocation. Do we need a 12.6.1 release? (Was: Heads-up: Verifying shim SBAT data failed: Security Policy Violation)
  - From: Roland Clobus <rclobus@rclobus.nl>