This probably should not have been closed as Fix Released quite yet. A gsbx64.efi binary was being built, which allowed enforcement.
Now, the proper fix to never allow unsigned / invalidly signed kernels has landed in Cosmic; so proceeding with the SRUs.
This probably should not have been closed as Fix Released quite yet. A gsbx64.efi binary was being built, which allowed enforcement.
Now, the proper fix to never allow unsigned / invalidly signed kernels has landed in Cosmic; so proceeding with the SRUs.