grub update fails because new version of shim want remove shim-signed package

[JBF]

I use Ubuntu 16.04 with proposed repository activated. Now there is an update of grub packages which fails:
- grub-common
- grub-efi-amd64
- grub-efi-amd64-bin
- grub-efi-amd64-signed
- grub2-common
- shim
This update want change shim package from version 0.9+1474479173.6c180c6-1ubuntu1 to version 13-0ubuntu2. Update manager fails to do the update but Synaptic says me that if I do this change it needs to remove shim-signed package. So I guess there is something missing in the dependencies of the new shim package.

What happened: update manager fails to complete the update and proposes to do a partial upgrade
What is expected: update manager completes the update without error.

Additional infos:
$ lsb_release -rd
Description: Ubuntu 16.04.3 LTS
Release: 16.04

$ apt-cache policy shim
shim:
  Installé : 0.9+1474479173.6c180c6-1ubuntu1
  Candidat : 13-0ubuntu2
 Table de version :
     13-0ubuntu2 500
        500 http://archive.ubuntu.com/ubuntu xenial-proposed/main amd64 Packages
 *** 0.9+1474479173.6c180c6-1ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     0.8-0ubuntu2 500
        500 http://archive.ubuntu.com/ubuntu xenial/main amd64 Packages

jjbf@JBF-zenbook:~$ apt-cache policy shim-signed
shim-signed:
  Installé : 1.32~16.04.1+0.9+1474479173.6c180c6-1ubuntu1
  Candidat : 1.32~16.04.1+0.9+1474479173.6c180c6-1ubuntu1
 Table de version :
 *** 1.32~16.04.1+0.9+1474479173.6c180c6-1ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1.12+0.8-0ubuntu2 500
        500 http://archive.ubuntu.com/ubuntu xenial/main amd64 Packages

Best regards. JBF

[Cyril Brulebois (kibi)]

This failure to upgrade cleanly is due to the shim-signed FTBFS: https://launchpad.net/ubuntu/+source/shim-signed/1.33.1~16.04.1/+build/14262252

which given the Breaks against earlier versions make new shim and old shim-signed non co-installable.

[John S. Gruber (jsjgruber)]

I was in this situation also.

It appears the build of the above was successful on 2008/1/31. I no longer get the partial upgrade problem.

JBF: Is this now working for you?

[JBF (jbf-faure)]

Yes it is now working as expected. I no longer get the partial upgrade problem too.

Best regards. JBF

[Steve Langasek (vorlon)]

For the record, uploads to -proposed always leave a window where the packages are not in a consistent state that is safe to dist-upgrade against, and should only be used with caution.