From 806578d39e2f7fe61db4a9790d7a7535f994fa28 Mon Sep 17 00:00:00 2001
From: jcoester <12155189+jcoester@users.noreply.github.com>
Date: Sat, 29 Aug 2026 16:26:29 +0200
Subject: [PATCH] Keep UEFI CA 2011 revocations mandatory
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

UEFI CA 2011 revocations need to remain mandatory because systems with dedicated GPUs may depend on UEFI CA 2011. As Windows Update currently skips applying optional revocations after unrelated PCA 2011 is revoked, marking these UEFI CA 2011 revocations as “optional” leaves systems vulnerable.
---
 PreSignedObjects/DBX/dbx_info_msft_latest.json | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/PreSignedObjects/DBX/dbx_info_msft_latest.json b/PreSignedObjects/DBX/dbx_info_msft_latest.json
index e32922c..85a2952 100644
--- a/PreSignedObjects/DBX/dbx_info_msft_latest.json
+++ b/PreSignedObjects/DBX/dbx_info_msft_latest.json
@@ -497,7 +497,6 @@
                 "flatHash": "3D23947C39680B9FCF22B092B97C9D38EDCC02F7AD13D3A925D1EE0B62797E73",
                 "filename": "grubx64.efi",
                 "description": "CVE-2020-10713; CVE-2020-14308; CVE-2020-14309; CVE-2020-14310; CVE-2020-14311; CVE-2020-15705; CVE-2020-15706; CVE-2020-15707",
-                "isOptional": "true",
                 "companyName": "Canonical",
                 "dateOfAddition": "2020-07-01",
                 "signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
@@ -508,7 +507,6 @@
                 "flatHash": "0AC2943ABF5EF953B939247B74331FB2C437E405A81DD5569D9CFF1D6183D53A",
                 "filename": "gcdx64.efi",
                 "description": "CVE-2020-10713; CVE-2020-14308; CVE-2020-14309; CVE-2020-14310; CVE-2020-14311; CVE-2020-15705; CVE-2020-15706; CVE-2020-15707",
-                "isOptional": "true",
                 "companyName": "Canonical",
                 "dateOfAddition": "2020-07-01",
                 "signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
@@ -519,7 +517,6 @@
                 "flatHash": "8E8ADDB29426D845A0101C2C1F26C2E7FE8C78128AB04F16CFCB4E06461B0101",
                 "filename": "grubnetx64.efi",
                 "description": "CVE-2020-10713; CVE-2020-14308; CVE-2020-14309; CVE-2020-14310; CVE-2020-14311; CVE-2020-15705; CVE-2020-15706; CVE-2020-15707",
-                "isOptional": "true",
                 "companyName": "Canonical",
                 "dateOfAddition": "2020-07-01",
                 "signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"