| Package | shim |
|---|---|
| Version | 16.1-2~deb10u1 (buster) |
This shim update is signed by both the old Microsoft UEFI CA 2011 certificate and the new Microsoft UEFI CA 2023 certificate, allowing to keep using Secure Boot on systems with any of those certificates in their UEFI DB.
This revision also updates the shim to version 16.1, which includes revocations for old grub2 versions. As such, it is important to have the latest grub2 updates installed.
The respective shim-signed package has also been updated to reflect this change.
For Debian 10 buster, these problems have been fixed in version 16.1-2~deb10u1.
We recommend that you upgrade your shim packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.