diff --git a/.gitignore b/.gitignore
index 76e31ba..2a10dce 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,4 @@
 /openssl-rhel-*.tar.xz
 /DBXUpdate-*.x64.bin
 /dtc-1.7.0.tar.xz
+/DBXUpdate-20250610.aa64.bin
diff --git a/edk2.spec b/edk2.spec
index d5634cb..89e520e 100644
--- a/edk2.spec
+++ b/edk2.spec
@@ -25,7 +25,7 @@ ExclusiveArch: x86_64 aarch64 riscv64
 
 Name:       edk2
 Version:    %{GITDATE}
-Release:    1%{?dist}
+Release:    2%{?dist}
 Summary:    UEFI firmware for 64-bit virtual machines
 License:    BSD-2-Clause-Patent and Apache-2.0 and MIT
 URL:        http://www.tianocore.org
@@ -58,6 +58,7 @@ Source80: edk2-build.py
 Source82: edk2-build.rhel-10
 
 Source90: DBXUpdate-%{DBXDATE}.x64.bin
+Source91: DBXUpdate-%{DBXDATE}.aa64.bin
 Patch1: 0003-Remove-paths-leading-to-submodules.patch
 Patch2: 0004-MdeModulePkg-TerminalDxe-set-xterm-resolution-on-mod.patch
 Patch3: 0005-OvmfPkg-take-PcdResizeXterm-from-the-QEMU-command-li.patch
@@ -207,7 +208,7 @@ cp -a -- %{SOURCE10} %{SOURCE11} %{SOURCE12} %{SOURCE13} .
 cp -a -- %{SOURCE40} %{SOURCE41} %{SOURCE43} %{SOURCE44} %{SOURCE45} .
 cp -a -- %{SOURCE50} .
 cp -a -- %{SOURCE80} %{SOURCE82} .
-cp -a -- %{SOURCE90} .
+cp -a -- %{SOURCE90} %{SOURCE91} .
 tar -C CryptoPkg/Library/OpensslLib -a -f %{SOURCE2} -x
 tar -xf %{SOURCE3} --strip-components=1 --directory MdePkg/Library/BaseFdtLib/libfdt
 
@@ -280,6 +281,7 @@ virt-fw-vars --input   RHEL-10/ovmf/OVMF.inteltdx.fd \
 
 %if %{build_aarch64}
 ./edk2-build.py --config edk2-build.rhel-10 -m armvirt --release-date "$RELEASE_DATE"
+cp DBXUpdate-%{DBXDATE}.aa64.bin RHEL-10/aarch64
 for raw in */aarch64/*.raw; do
     qcow2="${raw%.raw}.qcow2"
     qemu-img convert -f raw -O qcow2 -o cluster_size=4096 -S 4096 "$raw" "$qcow2"
@@ -414,6 +416,7 @@ install -m 0644 \
 %{_datadir}/%{name}/aarch64/QEMU_EFI-silent-pflash.*
 %{_datadir}/%{name}/aarch64/QEMU_EFI-qemuvars-pflash.*
 %{_datadir}/%{name}/aarch64/vars-template-pflash.*
+%{_datadir}/%{name}/aarch64/DBXUpdate*.bin
 %{_datadir}/AAVMF/AAVMF_CODE.verbose.fd
 %{_datadir}/AAVMF/AAVMF_CODE.fd
 %{_datadir}/AAVMF/AAVMF_VARS.fd
@@ -461,6 +464,11 @@ install -m 0644 \
 
 
 %changelog
+* Mon Oct 13 2025 Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
+- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
+- Resolves: RHEL-109548
+  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)
+
 * Tue Oct 07 2025 Miroslav Rezanina <mrezanin@redhat.com> - 20250822-1
 - Rebase to edk2-stable202508 [RHEL-111718]
 - Resolves: RHEL-111718
diff --git a/sources b/sources
index aba098a..d892fba 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,4 @@
+SHA512 (DBXUpdate-20250610.aa64.bin) = 2af6d22d139ff58cb2d0dc0883257b6131f1bd9cc04b4c062c21f1d0560508f8f4ea062e6946fd37c8ab47259772884e29c32a93844d5d6beadcf9e778e4ee51
 SHA512 (DBXUpdate-20250610.x64.bin) = be2bea068e6db47b5ad419fe9402035d9f3e1e75166eff50193387d68c209225f0e45a014fc3781718cb494f55ab98f71f5c28c96c7c21988ac050d94b1df881
 SHA512 (dtc-1.7.0.tar.xz) = d3ba6902a9a2f2cdbaff55f12fca3cfe4a1ec5779074a38e3d8b88097c7abc981835957e8ce72971e10c131e05fde0b1b961768e888ff96d89e42c75edb53afb
 SHA512 (edk2-d46aa46c8361.tar.xz) = cfafa14c6f6c5ca4c16239c2a3c0e290a77a987b3c8c6847a6198bdacbd0d7f4e2f950a0e603c3eaa1d2dbf5312f04705be11c3c38cbd6bcb7377e24660e775d