-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 04 May 2024 21:28:21 +0100
Source: shim
Architecture: source
Version: 15.8-1~deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian EFI team <debian-efi@lists.debian.org>
Changed-By: Steve McIntyre <93sam@debian.org>
Closes: 936009 1046268 1069054
Changes:
 shim (15.8-1~deb12u1) bookworm; urgency=medium
 .
   [ Steve McIntyre ]
   * Cope with changes in pesign packaging.
   * New upstream release fixing more bugs
   * Remove all our previous patches, no longer needed:
     + Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch (now
       upstream)
     + Enable-NX.patch (we don't want NX just yet until the whole boot
       stack is NX-capable)
     + block-grub-sbat3-debian.patch (not needed now upstream grub SBAT
       is 4)
   * Cherry-pick 2 new patches from upstream for grub revocations:
     + 0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch
     + 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch
   * Log if the build is nx-compatible or not
   * Force shim to use the latest revocations by default to block some
     older grub / peimage issues. This is:
     "shim,4\ngrub,4\ngrub.peimage,2\n"
   * Install a copy of the Debian CA certificate into /usr/share/shim.
     Closes: #1069054
   * Clean up better after build. Closes: #1046268
 .
   [ Bastien Roucariès ]
   * Port autopkgtest from ubuntu
   * Import MR-12: "shim-unsigned:amd64 cannot be installed alongside
     shim-unsigned:i386", thanks to adrian15 adrian15 (Closes: #936009).
   * Fix debian/watch and check signature
Checksums-Sha1:
 54777b393c1ee62bd69cc41a15572d95746f8b94 2631 shim_15.8-1~deb12u1.dsc
 cdec924ca437a4509dcb178396996ddf92c11183 2315201 shim_15.8.orig.tar.bz2
 e7559e3b15883b3b8dfcfd7cd6bebe55af846381 59116 shim_15.8-1~deb12u1.debian.tar.xz
 2aa71bf7c38a495f46f48578f5d734fa88078975 6340 shim_15.8-1~deb12u1_source.buildinfo
Checksums-Sha256:
 c202fbfb5de17bd6587b23bd171ea6f7f11dbce1c1b063f34a1469dbc517056e 2631 shim_15.8-1~deb12u1.dsc
 a79f0a9b89f3681ab384865b1a46ab3f79d88b11b4ca59aa040ab03fffae80a9 2315201 shim_15.8.orig.tar.bz2
 6c15c6111e7e40683f6aec2e8302a3ae830caa4144aba7e448553e574de30647 59116 shim_15.8-1~deb12u1.debian.tar.xz
 e73e757e06c53ebf509bded8a8044262593da5565158e8b576d3756869bfc28c 6340 shim_15.8-1~deb12u1_source.buildinfo
Files:
 58394cd894da6ce30b83b1da0abcc630 2631 admin optional shim_15.8-1~deb12u1.dsc
 a9452c2e6fafe4e1b87ab2e1cac9ec00 2315201 admin optional shim_15.8.orig.tar.bz2
 36e1403be664711c56eb17926930aac1 59116 admin optional shim_15.8-1~deb12u1.debian.tar.xz
 38ccb3a5f4781e77b163e3ad0da3cc79 6340 admin optional shim_15.8-1~deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=l0pU
-----END PGP SIGNATURE-----