Your message dated Sat, 11 Jul 2026 10:32:49 +0000
with message-id <[email protected]>
and subject line Released in 13.6
has caused the Debian Bug report #1131861,
regarding trixie-pu: package shim/16.1-1~deb13u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1131861: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1131861
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: [email protected]
Control: affects -1 + src:shim
User: [email protected]
Usertags: pu
Hi!
This is a new upstream version of shim, built for trixie. This
includes some SBAT-based revocations, plus a range of
security updates from upstream.
We also want to get a new shim built and signed by Microsoft using
both the old and new UEFI CA root keys, to extend our Secure Boot
support to cover both older and newer machines. The old CA root
expires in June, but Microsoft have said they will happily continue to
sign with that up until the end of its life.
As always with shim, I've reviewed every upstream code change.
I'm *not* including a full debdiff as we've moved three upstream
releases from 15.8 to 16.1 here. The changes are not minimal, but in
the case of shim we need to be as close to upstream as possible for
the sake of getting stuff reviewed and signed. The only local patch to
the upstream source now is to fix building with the latest
binutils. There are some trivial changes to packaging.
I've tested locally using CI and also by hand on various machines and
all looks good here.
Obviously, once this is accepted and autobuilt I'll need to submit
things for review and signing elsewhere. Then we'll be want
shim-signed updating too.
Please give me the go-ahead and I'll upload the new source.
--- End Message ---
--- Begin Message ---
Version: 13.6
This update was released as part of 13.6.
--- End Message ---
