| 2022-11-14 09:59:02 |
Julian Andres Klode |
bug |
|
|
added bug |
| 2022-11-17 10:57:13 |
Julian Andres Klode |
summary |
shim 15.6-0ubuntu1 |
shim 15.7-0ubuntu1 |
|
| 2022-11-17 11:11:10 |
Julian Andres Klode |
description |
[Impact]
New upstream release; shim security update CVE-2022-28737
[Test plan]
https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess/TestPlan
[Where problems could occur]
Machines could become unbootable due to bugs as usual.
Key rotations that require newer kernels can't enforce newer kernels being on the system prior to updates resulting in unbootable systems if kernels are not available. |
[Impact]
New upstream release; shim security update CVE-2022-28737
[Test plan]
https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess/TestPlan
[Where problems could occur]
Machines could become unbootable due to bugs as usual.
Key rotations that require newer kernels can't enforce newer kernels being on the system prior to updates resulting in unbootable systems if kernels are not available.
Requires the grub2-unsigned >= 2.04-1ubuntu47.4, >= 2.06-2ubuntu10 to be
published to security and on each machine first too. Maybe should add Breaks to those (though you can set 'latest' policy and it would require upcoming grub uploads, so not _entirely_ useful). |
|
| 2022-11-17 11:12:29 |
Julian Andres Klode |
description |
[Impact]
New upstream release; shim security update CVE-2022-28737
[Test plan]
https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess/TestPlan
[Where problems could occur]
Machines could become unbootable due to bugs as usual.
Key rotations that require newer kernels can't enforce newer kernels being on the system prior to updates resulting in unbootable systems if kernels are not available.
Requires the grub2-unsigned >= 2.04-1ubuntu47.4, >= 2.06-2ubuntu10 to be
published to security and on each machine first too. Maybe should add Breaks to those (though you can set 'latest' policy and it would require upcoming grub uploads, so not _entirely_ useful). |
[Impact]
New upstream release; shim security update CVE-2022-28737
[Test plan]
https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess/TestPlan
[Where problems could occur]
Machines could become unbootable due to bugs as usual.
Key rotations that require newer kernels can't enforce newer kernels being on the system prior to updates resulting in unbootable systems if kernels are not available.
Requires the grub2-unsigned >= 2.04-1ubuntu47.4, >= 2.06-2ubuntu10 to be
published to security and on each machine first too. Maybe should add Breaks to those (though you can set 'latest' policy and it would require upcoming grub uploads, so not _entirely_ useful).
Also breaks fwupd. |
|
| 2023-01-26 12:06:15 |
Launchpad Janitor |
merge proposal linked |
|
https://code.launchpad.net/~juliank/shim/+git/shim-signed/+merge/436050 |
|
| 2023-01-28 00:35:03 |
Launchpad Janitor |
shim (Ubuntu): status |
New |
Fix Released |
|
| 2023-01-28 00:35:03 |
Launchpad Janitor |
cve linked |
|
2022-28737 |
|
| 2023-01-28 07:14:57 |
Steve Langasek |
shim (Ubuntu Kinetic): status |
New |
Fix Committed |
|
| 2023-01-28 07:14:58 |
Steve Langasek |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2023-01-28 07:15:00 |
Steve Langasek |
bug |
|
|
added subscriber SRU Verification |
| 2023-01-28 07:15:03 |
Steve Langasek |
tags |
|
verification-needed verification-needed-kinetic |
|
| 2023-01-28 07:18:06 |
Steve Langasek |
bug task added |
|
shim-signed (Ubuntu) |
|
| 2023-01-28 07:18:20 |
Steve Langasek |
shim-signed (Ubuntu): status |
New |
Fix Released |
|
| 2023-01-28 07:19:37 |
Steve Langasek |
shim (Ubuntu Jammy): status |
New |
Fix Committed |
|
| 2023-01-28 07:19:42 |
Steve Langasek |
tags |
verification-needed verification-needed-kinetic |
verification-needed verification-needed-jammy verification-needed-kinetic |
|
| 2023-01-28 07:21:56 |
Steve Langasek |
shim-signed (Ubuntu Jammy): status |
New |
Fix Committed |
|
| 2023-01-28 07:23:24 |
Steve Langasek |
shim (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2023-01-28 07:23:28 |
Steve Langasek |
tags |
verification-needed verification-needed-jammy verification-needed-kinetic |
verification-needed verification-needed-focal verification-needed-jammy verification-needed-kinetic |
|
| 2023-01-28 07:24:49 |
Steve Langasek |
shim-signed (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2023-01-28 07:26:27 |
Steve Langasek |
shim (Ubuntu Bionic): status |
New |
Fix Committed |
|
| 2023-01-28 07:26:32 |
Steve Langasek |
tags |
verification-needed verification-needed-focal verification-needed-jammy verification-needed-kinetic |
verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
|
| 2023-01-28 07:28:11 |
Steve Langasek |
shim-signed (Ubuntu Bionic): status |
New |
Fix Committed |
|
| 2023-01-30 09:01:51 |
Dimitri John Ledkov |
tags |
verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
block-proposed-lunar verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
|
| 2023-01-30 13:45:50 |
Éric St-Jean |
bug |
|
|
added subscriber Éric St-Jean |
| 2023-01-30 16:33:28 |
Dimitri John Ledkov |
shim (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2023-01-30 16:33:30 |
Dimitri John Ledkov |
shim-signed (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2023-01-30 16:33:35 |
Dimitri John Ledkov |
shim (Ubuntu): status |
Fix Committed |
In Progress |
|
| 2023-01-30 16:33:37 |
Dimitri John Ledkov |
shim-signed (Ubuntu): status |
Fix Committed |
In Progress |
|
| 2023-01-30 21:10:19 |
dann frazier |
tags |
block-proposed-lunar verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
block-proposed-lunar verification-failed-jammy verification-needed verification-needed-bionic verification-needed-focal verification-needed-kinetic |
|
| 2023-01-31 21:52:40 |
Steve Langasek |
shim-signed (Ubuntu Kinetic): status |
New |
Fix Committed |
|
| 2023-01-31 22:00:29 |
Steve Langasek |
tags |
block-proposed-lunar verification-failed-jammy verification-needed verification-needed-bionic verification-needed-focal verification-needed-kinetic |
block-proposed-lunar verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
|
| 2023-02-01 12:58:10 |
Gunnar Hjalmarsson |
bug |
|
|
added subscriber Gunnar Hjalmarsson |
| 2023-02-15 10:47:18 |
Julian Andres Klode |
tags |
block-proposed-lunar verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
block-proposed-lunar verification-done-kinetic verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy |
|
| 2023-02-15 10:48:37 |
Julian Andres Klode |
tags |
block-proposed-lunar verification-done-kinetic verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy |
block-proposed-kinetic block-proposed-lunar verification-done-kinetic verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy |
|
| 2023-02-15 11:18:54 |
Julian Andres Klode |
tags |
block-proposed-kinetic block-proposed-lunar verification-done-kinetic verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy |
block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done-jammy verification-done-kinetic verification-needed verification-needed-bionic verification-needed-focal |
|
| 2023-02-15 11:24:49 |
Julian Andres Klode |
tags |
block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done-jammy verification-done-kinetic verification-needed verification-needed-bionic verification-needed-focal |
block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done-focal verification-done-jammy verification-done-kinetic verification-needed verification-needed-bionic |
|
| 2023-02-15 11:35:00 |
Julian Andres Klode |
tags |
block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done-focal verification-done-jammy verification-done-kinetic verification-needed verification-needed-bionic |
block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-02-15 11:35:39 |
Julian Andres Klode |
tags |
block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-02-16 10:26:08 |
Julian Andres Klode |
tags |
block-proposed-bionic block-proposed-focal block-proposed-jammy block-proposed-kinetic block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-02-16 10:47:52 |
Launchpad Janitor |
shim (Ubuntu Kinetic): status |
Fix Committed |
Fix Released |
|
| 2023-02-16 10:47:58 |
Launchpad Janitor |
shim-signed (Ubuntu Kinetic): status |
Fix Committed |
Fix Released |
|
| 2023-02-16 10:48:09 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2023-02-16 11:04:39 |
Launchpad Janitor |
shim (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
| 2023-02-16 11:04:47 |
Launchpad Janitor |
shim-signed (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
| 2023-02-16 11:10:52 |
Launchpad Janitor |
shim (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2023-02-16 11:10:59 |
Launchpad Janitor |
shim-signed (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2023-02-16 12:13:37 |
Julian Andres Klode |
tags |
verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic block-proposed-focal block-proposed-jammy verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-02-16 13:50:49 |
Dimitri John Ledkov |
tags |
block-proposed-bionic block-proposed-focal block-proposed-jammy verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic block-proposed-focal verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-02-16 16:27:50 |
Launchpad Janitor |
shim-signed (Ubuntu): status |
In Progress |
Fix Released |
|
| 2023-02-16 16:27:53 |
Launchpad Janitor |
shim (Ubuntu): status |
In Progress |
Fix Released |
|
| 2023-02-16 19:50:52 |
dann frazier |
shim-signed (Ubuntu Focal): status |
Fix Released |
Fix Committed |
|
| 2023-02-16 19:51:15 |
dann frazier |
shim (Ubuntu Focal): status |
Fix Released |
Fix Committed |
|
| 2023-03-02 16:48:05 |
Julian Andres Klode |
tags |
block-proposed-bionic block-proposed-focal verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic block-proposed-focal block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-03-02 22:15:42 |
Steve Langasek |
tags |
block-proposed-bionic block-proposed-focal block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed block-proposed-bionic block-proposed-focal block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-03-03 01:15:15 |
Steve Langasek |
shim (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2023-03-03 01:15:46 |
Steve Langasek |
shim-signed (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2023-03-03 01:58:51 |
Launchpad Janitor |
shim (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2023-03-03 02:37:18 |
Steve Langasek |
shim (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2023-03-03 03:20:59 |
Steve Langasek |
tags |
block-proposed block-proposed-bionic block-proposed-focal block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic block-proposed-focal block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-03-03 04:54:53 |
Launchpad Janitor |
shim (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2023-03-03 05:17:48 |
Steve Langasek |
shim (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2023-03-14 15:07:18 |
Dimitri John Ledkov |
tags |
block-proposed-bionic block-proposed-focal block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-03-14 15:15:18 |
Launchpad Janitor |
shim-signed (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2023-03-14 15:15:15 |
Launchpad Janitor |
shim (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2023-03-30 14:00:25 |
Dimitri John Ledkov |
tags |
block-proposed-bionic block-proposed-lunar verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
block-proposed-bionic verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-03-31 16:35:41 |
Launchpad Janitor |
shim-signed (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2023-06-22 23:31:15 |
Steve Langasek |
tags |
block-proposed-bionic verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
verification-done verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic |
|
| 2023-06-22 23:31:36 |
Launchpad Janitor |
shim (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
| 2023-06-22 23:31:43 |
Launchpad Janitor |
shim-signed (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
