import shim-15.6-1.el8

.shim.metadata

 69ae9594de0de390d98fa5f115b69ddccf2e6a89 SOURCES/shimaa64.efi
-c8a66ebbf003eb73d7709ac20ea8532d27ae1696 SOURCES/shimia32.efi
-3c037d1f2d4ba2527e3d0b4564d13c8f85730cb6 SOURCES/shimx64.efi
+eceeafa415c3d1d0f9a58afed1784524e6f0f4c4 SOURCES/shimia32.efi
+7d892d1460800ed04bf3043bc6fccfaf1e7ab6c2 SOURCES/shimx64.efi

SOURCES/shim.rpmmacros

@@ -13,9 +13,9 @@
 %global shimefix64 %{expand:%{SOURCE22}}
 #%%global shimefiarm %%{expand:%%{SOURCE23}
 
-%global shimveraa64 15-7.el8.1
-%global shimveria32 15.4-4.el8_5.2.rocky
-%global shimverx64 15.4-4.el8_5.2.rocky
+%global shimveraa64 15-7.el8.1.1
+%global shimveria32 15.6-1.el8
+%global shimverx64 15.6-1.el8
 #%%global shimverarm 15-1.el8
 
 %global shimdiraa64 %{_datadir}/shim/%{shimveraa64}/aa64
@@ -90,7 +90,7 @@ version signed by the UEFI signing service.				\
 # -i <input>
 %define distrosign(b:a:d:)						\
 	cp -av %{-d*}/%{-b*}%{-a*}.efi %{-b*}%{-a*}-unsigned.efi	\
-	%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n rockybootsigningcert -a %{SOURCE90000} -c %{SOURCE90001} }\
+        %{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n rockybootsigningcert -a %{SOURCE90000} -c %{SOURCE90001} }\
 	%{nil}
 
 # -a <efiarch>

SPECS/shim.spec

 Name:                 shim
-Version:              15.4
-Release:              2%{?dist}
+Version:              15.6
+Release:              1%{?dist}
 Summary:              First-stage UEFI bootloader
 License:              BSD
 URL:                  https://github.com/rhboot/shim/
@@ -102,45 +102,38 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
 %endif
 
 %changelog
-* Sun Nov 14 2021 Sherif Nagy <sherif@rockylinux.org> - 15.4-2
+* Fri Aug 19 2022 Sherif Nagy <sherif@rockylinux.org> - 15.6-1
+- shim-15.6
+
+* Fri Aug 19 2022 Sherif Nagy <sherif@rockylinux.org> - 15.6-1
 - Adding prod certs
 
-* Sun Nov 14 2021 Sherif Nagy <sherif@rockylinux.org> - 15.4-2
+* Fri Aug 19 2022 Sherif Nagy <sherif@rockylinux.org> - 15.6-1
 - Updating Rocky shim efi and CSV files
 
-* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
+* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
 - Updating Rocky testing certs and restructuring
 
-* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
+* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
 - Updating Rocky testing certs
 
-* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
+* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
 - Moving to PEM certs for Rocky
 
-* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
+* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
 - Remove Centos Certs and added Rocky certs
 
-* Tue Apr 06 2021 Peter Jones <pjones@redhat.com> - 15.4-2
-- Fix build-deps on our shim-unsigned-* packages.
-  Related: CVE-2020-14372 (and others)
-
-* Mon Apr 05 2021 Peter Jones <pjones@redhat.com> - 15.4-1
-- Update to shim 15.4
-  - Support for revocations via the ".sbat" section and SBAT EFI variable
-  - A new unit test framework and a bunch of unit tests
-  - No external gnu-efi dependency
-  - Better CI
-  Resolves: CVE-2020-14372
-  Resolves: CVE-2020-25632
-  Resolves: CVE-2020-25647
-  Resolves: CVE-2020-27749
-  Resolves: CVE-2020-27779
-  Resolves: CVE-2021-20225
-  Resolves: CVE-2021-20233
+* Mon Jun 06 2022 Peter Jones <pjones@redhat.com> - 15.6-1
+- Update to shim-15.6
+  Resolves: CVE-2022-28737
+
+* Mon Sep 21 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-16
+- Fix an incorrect allocation size
+  Resolves: rhbz#1877253
 
 * Fri Jul 31 2020 Peter Jones <pjones@redhat.com> - 15-15
 - Update once again for new signed shim builds.
-  Resolves: rhbz#1862231
+  Resolves: rhbz#1861977
 
 * Tue Jul 28 2020 Peter Jones <pjones@redhat.com> - 15-14
 - Get rid of our %%dist hack for now.
@@ -155,7 +148,9 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
 
 * Thu Jun 11 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-12
 - Fix firmware update bug in aarch64 caused by shim ignoring arguments
+  Resolves: rhbz#1830871
 - Fix a shim crash when attempting to netboot
+  Resolves: rhbz#1795654
 
 * Fri Jun 07 2019 Javier Martinez Canillas <javierm@redhat.com> - 15-11
 - Update the shim-unsigned-aarch64 version number