Bug#987991: shim-signed: Recent dbx update blacklists shimx64.efi (1.33+15+1533136590.3beb971-7)

[Steve McIntyre <steve@einval.com>]

Hi Ondřej,

On Mon, May 03, 2021 at 01:26:33PM +0200, Ondřej Holas wrote:
>Package: shim-signed
>Version: 1.33+15+1533136590.3beb971-7
>Severity: grave
>Justification: renders package unusable
>
>Recent dbx update (https://uefi.org/revocationlistfile) from 2021-04-29
>includes hash
>
>AF79B14064601BC0987D4747AF1E914A228C05D622CEDA03B7A4F67014FEE767
>
>which matches "message hash" of image shimx64.efi from latest shim-signed
>package. After importing recent dbx file into UEFI variable, the system
>refuses to boot with Secure Boot enabled.

ACK. We have just got new signed shim binaries back from Microsoft
last week, and we'll be publishing updated packages soon.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
Who needs computer imagery when you've got Brian Blessed?