But the Question would be if You have there with the Package the same Problem. But of Course, You could try it.
I would opt for 24.04 as 25.10 will not be an LTS release.
If none of that was working, honestly... on a package you have no concerns with, I would just apt mark hold that puppy and move on with my day.
It is not worth stressing over.
1 Like
How do i find the filename to apt hold it?
sudo touch /var/lib/fwupd/uefi-dbx-installed
sudo apt-mark hold secureboot-db
1 Like
Thanks for your help always @Aravisian 
1 Like
You wrote, that Secure Boot is disabled. Did You checked that again?
Yes I did
Did you read that dbx impossible to fix thread I posted from askubuntu?
Hmm ... when it is turned off, I would ask myself, why You get this Update ...
1 Like
@zenzen posted the possible cause behind all of this in another thread. Only MS can resolve this issue which begs the question why Linus allows MS to contribute poorly written code to the Linux kernel:
Exactly what I'm wondering
Unfortunately it's not clear from that article how is this mitigated exactly. I guess that's not really the point of it, but I do wonder if other distributions are experiencing the same type of errors due to this?
Well Microsoft is going from bad to worse, the comments alone are worth reading:
1 Like
It looks like this firmware update might have been getting stuck on your installation. To try and resolve this issue, please first install the latest updates from the Software Updater or by opening the Terminal (Ctrl+Alt+T) and entering these two commands:
sudo apt update
sudo apt dist-upgrade
After installing these updates, restart your computer before continuing.
Next, it should be possible to manually install this firmware update and clear the pending database afterwards – so this message shouldn't appear again – by opening the Terminal and entering these four commands:
sudo fwupdmgr refresh
sudo fwupdmgr get-updates
sudo fwupdmgr update
Afterwards, restart the computer to apply the changes. Next, open the Terminal again and enter this command:
sudo rm /var/lib/fwupd/pending.db
Finally, restart the computer once more to resolve the issue.
If this still didn't resolve the issue, could you please post the text output after running the four commands (directly above) in the Terminal? If possible, please also include the text output from the following command as well:
fwupdmgr get-devices
In addition, could you please let us know if you've made some prior modification(s) to Zorin OS after installing it to your computer? These modifications may include one or more of the following:
- adding third-party software repositories to your system
- manually editing any system files
- executing unofficial scripts/commands
This information would help us to troubleshoot the issue.
2 Likes
First to answer your question no ive made no alterations or additions. I have aclean install with this problem. ALso i did the steps you said and i still have this package in my software update it hasnt gone away. below is my get devices you reqested.
rainbow@rainbow-ASUS-BR1102FGA-BR1102FGA-BR1102FGA:~$ fwupdmgr get-devices
ASUS BR1102FGA BR1102FGA_BR1102FGA
│
├─FORESEE P709F128G:
│ Device ID: 03281da317dccd2b18de2bd1cc70a782df40ed7e
│ Summary: NVM Express solid state drive
│ Current version: V0527B0P
│ Vendor: Shenzhen Longsys Electronics Co., Ltd. (NVME:0x1D97)
│ GUIDs: 505e0f17-eda2-52a2-bf68-7dd38a0672ec
│ 69755606-b3d5-54d8-ac45-0e71301236eb
│ d6559375-4c27-5a22-9ba8-0dfda72a0ac4
│ 35b1af6d-abba-5394-b795-f60e0616a98b
│ 3da8f27a-1612-5de7-b9b5-1b8584cd86ee
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│
├─System Firmware:
│ │ Device ID: a45df35ac0e948ee180fe216a5f703f32dda163f
│ │ Summary: UEFI ESRT device
│ │ Current version: 771
│ │ Minimum Version: 771
│ │ Vendor: ASUSTeK COMPUTER INC. (DMI:American Megatrends International, LLC.)
│ │ Update State: Success
│ │ GUIDs: d668d499-b5cf-517b-b270-c1f48cef15eb
│ │ 230c8b18-8d9b-53ec-838b-6cfc0383493a
│ │ Device Flags: • Internal device
│ │ • Updatable
│ │ • System requires external power source
│ │ • Needs a reboot after installation
│ │ • Cryptographic hash verification is available
│ │ • Device is usable for the duration of the update
│ │
│ └─UEFI dbx:
│ Device ID: 362301da643102b9f38477387e2193e57abaa590
│ Summary: UEFI revocation database
│ Current version: 466
│ Minimum Version: 466
│ Vendor: UEFI:Linux Foundation
│ Install Duration: 1 second
│ GUIDs: 6c9777b8-19f2-5e2c-9210-66ef3691a9f3
│ c8749f7f-439b-5c3c-a2ea-3baacf663a5a
│ c6682ade-b5ec-57c4-b687-676351208742
│ f8ba2887-9411-5c36-9cee-88995bb39731
│ 7d5759e5-9aa0-5f0c-abd6-7439bb11b9f6
│ 0c7691e1-b6f2-5d71-bc9c-aabee364c916
│ Device Flags: • Internal device
│ • Updatable
│ • Supported on remote server
│ • Needs a reboot after installation
│ • Only version upgrades are allowed
│ • Signed Payload
│
├─UEFI Device Firmware:
│ Device ID: 349bb341230b1a86e5effe7dfe4337e1590227bd
│ Summary: UEFI ESRT device
│ Current version: 1
│ Vendor: DMI:American Megatrends International, LLC.
│ Update State: Success
│ GUID: 2fe2cbfc-b9aa-4a93-ab5b-40173b581c42
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│
└─USB2.0 HD UVC WebCam:
Device ID: 54dda0fbfd5ac0dee5efc0ec4baefc9190d666ac
Current version: 22.7
Vendor: Azurewave (USB:0x13D3)
GUIDs: 4f41b3f0-489c-580c-971b-377d0ba803f1
9fab7e74-8d6c-5117-a2bf-fe480d14c59d
Device Flags: • Updatable
rainbow@rainbow-ASUS-BR1102FGA-BR1102FGA-BR1102FGA:~$
Thanks for the information. Could you please let us know if the issue still persists after restarting your computer now?
If so, could you please upload a screenshot of the message in the Software store here? In addition, could you please send us the text output after entering these commands in the Terminal again:
sudo fwupdmgr refresh
sudo fwupdmgr get-updates
sudo fwupdmgr update
sudo rm /var/lib/fwupd/pending.db
This would allow us to see whether this firmware update installed successfully or not.