secureboot-db (1.8) groovy; urgency=medium

  * Roll back the dbx updates to the version prior to 1.6 (the 2020 MS
    updates) due to concerns raised about breaking compatibility with Fedora
    whose current shim is blacklisted by the new update.  Updates will be
    rolled out again later in a coordinated fashion.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 19 Oct 2020 13:15:23 -0700

secureboot-db (1.7) groovy; urgency=medium

  * secureboot-db.service: Ignore sbkeysync failures, which is expected
    to occur with some firmware.

 -- dann frazier <dannf@ubuntu.com>  Wed, 26 Aug 2020 15:56:04 -0400

secureboot-db (1.6) groovy; urgency=medium

  * Ship MS 2020 split arch dbx updates. LP: #1890835
  * Add arm64 architecture.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 24 Jul 2020 00:34:57 +0100

secureboot-db (1.5) eoan; urgency=medium

  * Add secureboot-db.service to apply updates at boot (LP: #1791370)
  * Delete postinst script, as systemd service is started postinst by dh

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Jul 2019 17:36:02 +0200

secureboot-db (1.4) cosmic; urgency=medium

  * Update maintainer field, since Jamie is no longer on the hook for this.
    Thanks, Jamie!
  * Ignore failures from chattr calls (since we already ignore failures from
    sbkeysync itself), to allow the package to install in a container.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 07 Sep 2018 13:12:50 -0700

secureboot-db (1.3) cosmic; urgency=medium

  * Handle the case where the database variable does not yet exist at all.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 07 Sep 2018 00:55:56 -0700

secureboot-db (1.2) cosmic; urgency=medium

  * Apply the August 2016 dbx updates from Microsoft.  LP: #1776996.
  * chattr -i the EFI variables before trying to call sbkeysync, since the
    kernel now has these files immutable by default.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 06 Sep 2018 23:35:21 -0700

secureboot-db (1.1) raring-proposed; urgency=low

  * debian/control: use 'Architecture: any-amd64 any-i386' since armhf can't
    install sbsigntool and this package Depends on sbsigntool

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 04 Feb 2013 15:04:58 -0600

secureboot-db (1.0) raring-proposed; urgency=low

  * Initial release (LP: #1081700)

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 03 Dec 2012 16:55:00 -0600
