The affected shim version is 15.7. Shim 15.8 was released on January 23, 2024, more than six months before the distribution of the SBAT blacklist (August 13, 2024). Version 15.8 fixed six known vulnerabilities which are listed here: https://security-tracker.debian.org/tracker/source-package/shim Debian 12.5 and 12.6 have been released after the shim release date with corresponding ISOs. However, neither includes the updated shim. Regards
Attachment:
signature.asc
Description: This is a digitally signed message part