Hi!

While preparing a downstream import of the recent fwupd-efi update, I noticed
that the packages in unstable (and the updated prepared for trixie in git) are
lacking upstream commit 82cdf4f71471034061656b0f9fb6f5a940fe3343, which fix an
issue that cause the built .efi files to carry the following SBAT entries:

unstable:

sbat,1,UEFI shim,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
fwupd-efi,2,Firmware update daemon,fwupd-efi,1.9,https://github.com/fwupd/fwupd-efi
fwupd-efi.debian,2,Debian,fwupd,1:1.9-1,https://tracker.debian.org/pkg/fwupd

trixie (git):

sbat,1,UEFI shim,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
fwupd-efi,2,Firmware update daemon,fwupd-efi,1.9,https://github.com/fwupd/fwupd-efi
fwupd-efi.debian,2,Debian,fwupd,1:1.9-1~deb13u1,https://tracker.debian.org/pkg/fwupd

the debian entries there should have stayed at 1, like the 1:1.7-1 one in trixie:

sbat,1,UEFI shim,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
fwupd-efi,1,Firmware update daemon,fwupd-efi,1.7,https://github.com/fwupd/fwupd-efi
fwupd-efi.debian,1,Debian,fwupd,1:1.7-1,https://tracker.debian.org/pkg/fwupd

but given that at least unstable has the accidental bump, it should be made
explicit while fixing the underlying cause to prevent the next bump from going
wrong as well ;)

I'll open MRs with the required changes shortly.

Thanks for your work on fwupd!

Fabian

trixie: https://salsa.debian.org/efi-team/fwupd-efi/-/merge_requests/2
unstable: https://salsa.debian.org/efi-team/fwupd-efi/-/merge_requests/3

feel free to mangle/adapt/... as you see fit ;)

Fabian

We believe that the bug you reported is fixed in the latest version of
fwupd-efi, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1152861@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mario Limonciello <superm1@debian.org> (supplier of updated fwupd-efi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 02 Nov 2026 11:09:20 -0600
Source: fwupd-efi
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 1:1.9-2
Distribution: unstable
Urgency: medium
Maintainer: Debian EFI <debian-efi@lists.debian.org>
Changed-By: Mario Limonciello <superm1@debian.org>
Closes: 1152861
Changes:
 fwupd-efi (1:1.9-2) unstable; urgency=medium
 .
   [ Mario Limonciello ]
   * Backport gcc-fstack-protector.patch from upstream
 .
   [ Fabian Grünbichler ]
   * pick patch fixing SBAT generation (Closes: #1152861)
Checksums-Sha1:
 9d7324a483898c0939714f86091c48494a4e01a1 2872 fwupd-efi_1.9-2.dsc
 2b8ff162c10a6fdf2694c6ffbd94dd002e44ee6a 54667 fwupd-efi_1.9.orig.tar.gz
 e79179cf9fcc68ee0a6fa79834c016eae1296e91 14260 fwupd-efi_1.9-2.debian.tar.xz
 c5c6e050820d1fa8c4e607d8b6ef0a11af8da575 8692 fwupd-efi_1.9-2_source.buildinfo
Checksums-Sha256:
 bce6d4c12d8bc1a45e46da2e25355a424af656d48dcf18f001df7044a2c4026d 2872 fwupd-efi_1.9-2.dsc
 b1a92713659b5ffe6adae7a53adae6f353f07cfcc668736d38d217ec53fa022b 54667 fwupd-efi_1.9.orig.tar.gz
 6e2064d0982fd680767a6301976c93239c40a29c4c6ddcdd933092853fc09c60 14260 fwupd-efi_1.9-2.debian.tar.xz
 9af6cbb3560f62314b47d42bc1779d7b14f94c694ba6f078998c8cef608ed8cc 8692 fwupd-efi_1.9-2_source.buildinfo
Files:
 708ee95e50b1548a3d7d99dd4a62a555 2872 admin optional fwupd-efi_1.9-2.dsc
 473cb418e4d30962ebebd8d3989e85e0 54667 admin optional fwupd-efi_1.9.orig.tar.gz
 ddd25a4d6742670dfa8a5f00b853b708 14260 admin optional fwupd-efi_1.9-2.debian.tar.xz
 91a1ea4b67f0c923b2778b6fd73c9da7 8692 admin optional fwupd-efi_1.9-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=ouU2
-----END PGP SIGNATURE-----