[Bug 2076929] Re: [SRU] Rebuild cd-boot-images-{amd64, arm64} against new shim

[Steve Langasek]

https://launchpad.net/ubuntu/+source/cd-boot-images-amd64/20.4/+build/28901983 shows:
Get:63 http://ftpmaster.internal/ubuntu jammy-updates/main amd64 shim-signed amd64 1.51.4+15.8-0ubuntu1 [668 kB]

https://launchpad.net/ubuntu/+source/cd-boot-images-arm64/16.3/+build/28901984 shows:
Get:62 http://ftpmaster.internal/ubuntu jammy-updates/main arm64 shim-signed arm64 1.51.4+15.8-0ubuntu1 [559 kB]

Verification done.

(this was a badly-formed test case.)

** Tags removed: verification-needed verification-needed-jammy
** Tags added: verification-done-jammy

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cd-boot-images-arm64 in Ubuntu.
https://bugs.launchpad.net/bugs/2076929

Title:
  [SRU] Rebuild cd-boot-images-{amd64,arm64} against new shim

Status in cd-boot-images-amd64 package in Ubuntu:
  Confirmed
Status in cd-boot-images-arm64 package in Ubuntu:
  Confirmed
Status in cd-boot-images-amd64 source package in Jammy:
  Fix Committed
Status in cd-boot-images-arm64 source package in Jammy:
  Fix Committed

Bug description:
  [ Impact ]

   * Microsoft is rolling out SBAT revocations via Windows update such that
     single-boot machines with Windows won't be able to boot shim executables
     with SBAT level less than shim,4.

   * For the 22.04.5 media we would like to include the 15.8 shim so that
     it is bootable on such machines.

  [ Test Plan ]

   * Ensure that the resulting cd-boot images contain our 15.8-0ubuntu1 MS UEFI
     CA signed shim executable.

  [ Where problems could occur ]

   * Impact is limited to media built using the new cd-boot images which will go
     through the usual rigorous QA process.

   * The shim and grub that will be used as part of this process will be in the Jammy
     archive before being part of media.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cd-boot-images-amd64/+bug/2076929/+subscriptions