Bug#1024395: inconsistencies between shim-signed versions (= 15.4-7) and shim-helpers-amd64-signed shim (= 15.6-1)

Eric Valette eric.valette at free.fr
Fri Nov 18 22:01:46 GMT 2022


dpkg -s shim-signed
Package: shim-signed
Status: install ok installed
Priority: optional
Section: utils
Installed-Size: 937
Maintainer: Debian EFI Team <debian-efi at lists.debian.org>
Architecture: amd64
Multi-Arch: same
Source: shim-signed (1.38)
Version: 1.38+15.4-7
Depends: shim-signed-common (>= 1.38+15.4-7), grub-efi-amd64-bin, 
shim-helpers-amd64-signed (>= 1+15.4+2), grub2-common (>= 2.02+dfsg1-16)
Recommends: secureboot-db
Description: Secure Boot chain-loading bootloader (Microsoft-signed binary)
  This package provides a minimalist boot loader which allows verifying
  signatures of other UEFI binaries against either the Secure Boot DB/DBX or
  against a built-in signature database.  Its purpose is to allow a small,
  infrequently-changing binary to be signed by the UEFI CA, while allowing
  an OS distributor to revision their main bootloader independently of 
the CA.
  .
  This package contains the version of the bootloader binary signed by the
  Microsoft UEFI CA.
Built-Using: shim (= 15.4-7)

dpkg -s shim-helpers-amd64-signed
Package: shim-helpers-amd64-signed
Status: install ok installed
Priority: optional
Section: admin
Installed-Size: 934
Maintainer: Debian EFI team <debian-efi at lists.debian.org>
Architecture: amd64
Version: 1+15.6+1
Replaces: shim (<< 15+1533136590.3beb971-3~), shim-signed (<< 1.29)
Depends: shim-unsigned (>= 15.6-1)
Breaks: shim-signed (<< 1.29)
Conflicts: shim (<< 15+1533136590.3beb971-3~)
Description: boot loader to chain-load signed boot loaders (signed by 
Debian)
  This package provides a minimalist boot loader which allows verifying
  signatures of other UEFI binaries against either the Secure Boot DB/DBX or
  against a built-in signature database.  Its purpose is to allow a small,
  infrequently-changing binary to be signed by the UEFI CA, while allowing
  an OS distributor to revision their main bootloader independently of 
the CA.
  .
  This package contains the MOK manager and fall-back manager signed by the
  Debian UEFI CA to be used by shim-signed.
Built-Using: shim (= 15.6-1)

-- eric



More information about the Pkg-grub-devel mailing list