shim 14 - Important bug fix release The shim EFI binary cannot have sections whose offset is not a multiple of the file header offset, or else signtool.exe will generate an incorrect signature that cannot be verified. Currently we generate a PLT section that is incorrectly aligned, due to an error in rebasing OpenSSL to fix a different issue. This version rectifies that error, as well as adding --no-undefined to the final link, so that any such missing symbol will cause a build error. This doesn't necessarily solve the file offset problem in all cases, but it does solve it in all the cases we've actually seen so far.