diff options
| author | Steve McIntyre <steve@einval.com> | 2026-05-17 22:46:17 +0100 |
|---|---|---|
| committer | Steve McIntyre <steve@einval.com> | 2026-05-17 22:49:28 +0100 |
| commit | 5bf524a5960e24df055123cb491d52fe8f265c94 (patch) | |
| tree | 153ee331a6446f4e2e076be4d2ce1b1cecb4c607 | |
| parent | ca8556f025821178897986b431bf1bfdc38abb09 (diff) | |
| download | shim-signed-5bf524a5960e24df055123cb491d52fe8f265c94.tar.gz shim-signed-5bf524a5960e24df055123cb491d52fe8f265c94.zip | |
Update changelog
| -rw-r--r-- | debian/changelog | 5 | ||||
| -rw-r--r-- | debian/shim-signed.preinst.in | 7 |
2 files changed, 9 insertions, 3 deletions
diff --git a/debian/changelog b/debian/changelog index e0224fb..03a95b7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -5,8 +5,11 @@ shim-signed (1.48) UNRELEASED; urgency=medium + Existing sbverify versions in Debian are buggy when verifying. + Switch to using a python script verify_combine_sigs to fill in the gaps. + * In preinst, try to verify that the signed shim we're trying to + install will actually boot on this system - let's not break + systems on upgrade. - -- Steve McIntyre <93sam@debian.org> Wed, 06 May 2026 23:54:12 +0100 + -- Steve McIntyre <93sam@debian.org> Sun, 17 May 2026 22:47:06 +0100 shim-signed (1.47) unstable; urgency=medium diff --git a/debian/shim-signed.preinst.in b/debian/shim-signed.preinst.in index 76343fa..bc66b0f 100644 --- a/debian/shim-signed.preinst.in +++ b/debian/shim-signed.preinst.in @@ -85,8 +85,11 @@ case "$1" in echo "***********************************************************" echo "$SB_BOOT_ERROR" echo - echo "You probably need to update the trusted certificates list (DB)." - echo "See https://wiki.debian.org/SecureBoot/UpdateCA for more information." + echo "You probably need to update the trusted certificates list (DB). See" + echo + echo " https://wiki.debian.org/SecureBoot/UpdateCA" + echo + echo "for more information." echo echo "ABORT - this system will not currently boot with this shim installed." echo "***********************************************************" |