diff --git a/SPECS/shim-unsigned-aarch64.spec b/SPECS/shim-unsigned-aarch64.spec
index f0290b1..afa01e7 100644
--- a/SPECS/shim-unsigned-aarch64.spec
+++ b/SPECS/shim-unsigned-aarch64.spec
@@ -16,7 +16,7 @@
 
 Name:		shim-unsigned-aarch64
 Version:	15
-Release:	6%{?dist}
+Release:	7%{?dist}
 Summary:	First-stage UEFI bootloader
 ExclusiveArch:	aarch64
 License:	BSD
@@ -137,6 +137,10 @@ cd ..
 %files debugsource -f build-%{efiarch}/debugsource.list
 
 %changelog
+* Tue Apr 06 2021 Peter Jones <pjones@redhat.com> - 15-7
+- Backport this to EL 8 so we can build-dep on the right version.
+  Related: CVE-2020-14372 (and others)
+
 * Tue May 26 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-6
 - Fix a shim crash when attempting to netboot
   Resolves: rhbz#1840036