shim-signed (1.40+pmx1) bookworm; urgency=medium

  * Update to shim 15.8
  * Rebuild for Proxmox

 -- Proxmox Support Team <support@proxmox.com>  Wed, 05 Jun 2024 12:45:26 +0200

shim-signed (1.40) unstable; urgency=medium

  * Stop recommending secureboot-db, we don't have that package.
    Closes: #1042964, #1041449, #932358
  * Add Romanian translation for debconf templates, thanks to
    Remus-Gabriel Chelu. Closes: #1039090

 -- Steve McIntyre <93sam@debian.org>  Fri, 04 Aug 2023 12:21:47 +0100

shim-signed (1.39+pmx1) bookworm; urgency=medium

  * Rebuild for Proxmox

 -- Proxmox Support Team <support@proxmox.com>  Mon, 20 Nov 2023 11:31:06 +0100

shim-signed (1.39) unstable; urgency=medium

  * Build against new signed binaries corresponding to 15.7-1
    + This syncs up build-deps again. Closes: #1016280
    + We now have arm64 signed shims again \o/
      Undo the hacky unsigned arm64 build
      Closes: #1008942, #992073, #991478
    Pulls multiple other bugfixes in for the signed version:
    + Make sbat_var.S parse right with buggy gcc/binutils
    + Enable NX support at build time, as required by policy for signing
      new shim binaries.
    + Fixes argument handling bug with some firmware implementations.
      Closes: #995940
  * Update build-dep on shim-unsigned to use 15.7-1
  * Block Debian grub binaries with sbat < 4 (see #1024617)
    + Update Depends on grub2-common to match.
  * postinst/postrm: make config_item() more robust
  * Add pt_BR translation, thanks to Paulo Henrique de Lima
    Santana. Closes: #1026415
  * Tweak dependencies

 -- Steve McIntyre <93sam@debian.org>  Thu, 09 Mar 2023 00:58:53 +0000

shim-signed (1.38) unstable; urgency=medium

  * Tweak how we call grub-install; don't abort on error. Not ideal
    behaviour either, but don't break upgrades. Copy the behaviour
    from the grub packages here. Closes: #990984
  * Update build-dep on shim-unsigned to use 15.4-7

 -- Steve McIntyre <93sam@debian.org>  Mon, 12 Jul 2021 12:46:52 +0100

shim-signed (1.37) unstable; urgency=medium

  * Build against new signed binaries corresponding to 15.4-6
    Pulls multiple bugfixes in for the signed version:
    + Add arm64 patch to tweak section layout and stop crashing
      problems. Upstream issue #371. (#990082, #990190)
    + In insecure mode, don't abort if we can't create the MokListXRT
      variable. Upstream issue #372. (#989962, #990158)
  * Update build-dep on shim-unsigned to use 15.4-6

 -- Steve McIntyre <93sam@debian.org>  Tue, 29 Jun 2021 09:26:20 +0100

shim-signed (1.36) unstable; urgency=medium

  * Add defensive code around calls to db_get. Don't fail if they
    return errors. Closes: #988114
  * Update build-dep on shim-unsigned to use 15.4-5

 -- Steve McIntyre <93sam@debian.org>  Thu, 06 May 2021 00:50:02 +0100

shim-signed (1.35) unstable; urgency=medium

  * Add explicit dependency from shim-signed to shim-signed-common.
    Also check if we have update-secureboot-policy available before we
    try to call it. Closes: #988047, #988056
  * If we're not running on an EFI system then exit cleanly in
    postinst and postrm. We have nothing to do here. Closes: #988059
  * Fix the old doc links for shim-signed. Closes: #988057
  * Update build-dep on shim-unsigned

 -- Steve McIntyre <93sam@debian.org>  Tue, 04 May 2021 18:47:42 +0100

shim-signed (1.34) unstable; urgency=medium

  * Build against new signed binaries corresponding to 15.4-2
    Closes: #971129, #987991
  * ***WARNING***: arm64 shim is no longer signed, due to major
    toolchain problems. See NEWS.Debian for more
    information. Separated out the binary package for arm64 to allow
    for a different description, and tweaked the Makefile too.
  * Update build-deps and Standards-Version
  * Tweak Makefile setup - do our verification testing chained from
    the "all" target, not "clean". Closes: #936002
  * Don't include apport stuff in the Debian build, it's not useful.
  * Tweak dh_install* usage for docs.
  * Add Spanish translation for debconf templates, thanks to
    Camaleón. Closes: #987339
  * Multiple bugfixes in postinst and postrm handling:
    + Call grub-install using the correct grub target in postinst
    + Also call grub-install using the correct grub target in the
      postrm, and clean up the shim binary from the ESP
    + In each case, also check and use the correct configured options
      for grub-install
    + Move the postinst grub-install code from the -common package to
      the arch-specific packages, to make sure it's always called when
      needed.
    + Only run grub-install etc. if we're actually on an EFI-booted
      system.

 -- Steve McIntyre <93sam@debian.org>  Mon, 03 May 2021 20:13:04 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog shim-signed`.