From 19ccdd4496c2ed0433debdcbf61d582ef22e9958 Mon Sep 17 00:00:00 2001
From: Andrew Lukoshko <andrew.lukoshko@gmail.com>
Date: Wed, 29 Oct 2025 13:33:40 +0000
Subject: [PATCH] import CS shim-unsigned-x64-16.1-1.el9

---
 .gitignore                   |   3 ++-
 .shim-unsigned-x64.metadata  |   3 ++-
 SOURCES/vendordb.esl         | Bin 2408 -> 0 bytes
 SPECS/shim-unsigned-x64.spec |  13 +++++++++----
 4 files changed, 13 insertions(+), 6 deletions(-)
 delete mode 100644 SOURCES/vendordb.esl

diff --git a/.gitignore b/.gitignore
index 668482d..099ee78 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
-SOURCES/shim-15.8.tar.bz2
+SOURCES/shim-16.1.tar.bz2
+SOURCES/vendordb.esl
diff --git a/.shim-unsigned-x64.metadata b/.shim-unsigned-x64.metadata
index 89e9ccb..2b5f110 100644
--- a/.shim-unsigned-x64.metadata
+++ b/.shim-unsigned-x64.metadata
@@ -1 +1,2 @@
-cdec924ca437a4509dcb178396996ddf92c11183 SOURCES/shim-15.8.tar.bz2
+53a4a52f2cddd7ae880e405b4e3336a5968c5683 SOURCES/shim-16.1.tar.bz2
+3371b3acf8fa4f3be91e90698d5c9ed66ccc19ab SOURCES/vendordb.esl
diff --git a/SOURCES/vendordb.esl b/SOURCES/vendordb.esl
deleted file mode 100644
index 8991b3eae876999d4e8eaefa3087bf84c23e68c0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2408
zcmcJQc|6qn8pr21o9s91)Ct2Ju88{^gDgp7jgtKs8l*AEHZ?O$D9lWDA<IdTH6$U`
zMAp%2=pb9C&e+0H-9yUS5SMeh=bl^V^}6?ud%yoYujhF^-|hK6@6Wf`om)1UU16KR
zsgfmX&QTx2Ais`loA##}3^XDm(Y%(SMXr0`X$-Pp*&qvgrU(WFpip55n<lPFjeX_;
ziX(+J;t$3zivxft0s?wt<v<xE%oQ#oChkP`MIZE`??KyylC-hPpwd<xCWiVPM>~^A
zVN^2Oj6$KK&GBeGtO|(!eKlb~PMSt0`2>@x^aE6~Z-5V7n?wl#73IZsKu{kv1P!oy
zIDHR!ahw5&#TtBe|NjSI0V;pIG=PA>Sb!u1WC0>j763rH8{gvPcQK0-h1-e;Dh1Bk
zR|=ZfjMei&ry|h>h@^f88^2V^leHoH4&DkcAhc^MzU|2}2(lh(%zU&0nP!x^ofyT}
zJ<K?&g>I)`hsDR<z3Tq1GSR}z>A(O(wiq6l|8D+q;k=~e&^fC~KfYSv(2vQX*0!A!
zhs|Z_mm-lmsbjddsTC`KleZGt#%(6UDN8Y6s-=tQ)e(%I$0Zu#$JlAI%uXS24=w(t
zR%y9@xgFE<LWO_RTjQgw<oq7?OYAcjUAg8RLh>5fN9MYF#2Xh@CkGBDVNz20X_nH@
zBd-lkor6g`L6P?dGs2BH&l|2p-sJV>o>)y22NvU?FaQFSI)jd&!sdG`NWkUbGEXUG
z)9L|@Hb=7ZS^`8bScG3LO#ihV6fkfUC>Q(Z36fj$r2$|AjsRhs=8t9H?6u9Z0}zF2
zFS9_ur_}v<L|$!ar;GNCZx#2ReCuB;6$y3j`|P&UpIzMPggA#telZu<vG_}R{+sD-
zAx%bI0?Izz&!_FeT1L4!)Iyj;Uzo<3JIt|!<JrV_JwY#xCfY(#bX`{mF%`$O>jbd1
zWj|<l_aaC7n~>UIl<_HB;o>CuifPnhh+|#<Upgd)CUtf|5AD3w$KPG5mZJb5C!J25
zM)rdi7B|BfPhF}fLse8ZJU6nCVjpvj@(t_7n7#8WLKVU(l>FrJ>NR|>L%FwTV_D3u
zHTHR=yLLfn+rs__JL!I^*~y-5%6Fyn3jJ52`DRLoC597eXH#=}O&RSO4ZiP-zhL+(
z;x~p9H|^I9Bj}qP6aUF@%k(Z2TPEG|i@Ji=|Cv>T|C&`C7K;P1hB#fE;qR<|cK>%9
zv7lcw3Eg56y2&IIfOJYVne}e3lH;hnQ%LB^&MSjAUE3w=dG8%-2InLHtx~g^Gy&e~
zKHFqXIknc@zwP_;Ke<1fgQtmmNAwaFB=~nrq^cQFQ+<Z>n5mt*YNP8ljFB7eZ2M@T
znMYM2A9eJCe^!j}Yp7?8xJLQ)DER3W(5j9K)cGA)Y5kBQ+b0(xIp6gQ5hIu!^GUJ;
z!Qew9yAuoC|7Lb+an(W)&8Bs6s%K@TE(dl<0G_!l;1(FZ9CI0Sze32PhDlvI1`Nl?
zZNKZ~q~_Flrh>PJ-?aOZGhd2r_IJh(zw6dXw+&pYj=4Y%`})9_)wAcu4GB*SO>rZ;
zNv&%<x@t=pg8~UMSrS`t(`n$gw7Vhwm@7w>uyJXlB>%|PRE9?wMjdZ%_u+C-2kqtd
z?qm4UrtqjJ_YKQ{nlpm7?@uBR#<Xz@n`)BCw`<n((hSDN?W=V#dUcZa%U7d!ys-KZ
z`$U_ih8;~`ob^VXTnzZ-zEF1|tklkhbnSNVS>snQotcr{6K7R5Wh6x^UO!zHmLjmN
zq>MOZ02qGUIYw)RP?}7mRO>6tu-2bU#}Gn!S;5s7_Pol~$|w9Ltuk*}DygS}0d$SL
zr<8VSwJ{w7uT*imB-bfCwEUjT@J9dBvi|EQUOCJxR8w~~OkGea(TFIM^2{B)q3;%+
znu+@Kn<kM!AMh(p`IktIKYkQ@T~T>3?)r;1^n7N4SNmMbzlqeJCP-|Fl;oC3!8gCg
z_%B$3ZFOHoVdenv!wp*h3YaMyUB%(cX43XXMt0vxcr+DoGu+!cotj5X^M>6SD35@z
z)u|pcg}x3zIWFN>(E8IH$0DvpmaTqvB1tp4Y!;F$Y^t{wLklc<h%gizD^GlEQJ<xn
z+Q;8U(J@h(^|SPKo%GL=32WsVnAA(u;Bk+z2b^Fwu}GJq&K|RqsFZvScgb}7z5@BM
zF-nPdb7X$42v^ECv*<jpPNS4zcTuSEqJEyt2d1exu@l)M!(f{SnkK5XYqp<ua1)_>
zD^Bn0J4sB@QdYK_dFv`aVb5oF*$asHhrV9j<LiW*dyg?}#LI~?55B#p`5rZW9`Sy)
z(CCb>j&+Bi(OZ@Lc+dRdLlf8V&o2`{CdXo5&+zuY6tA5NQa;{C;vUGt5W@d9oU?3@
zFrHKw`l>-!$ktt;KI6PbVc{Uhxf8FHh?d{Q>b7^E`eAj(rd341<qur4I@D1ok>Q46
zPc1vDsp9MvbAm=_HBrSI_vPV>qb<}MLQL=tqj(Bk5<HZ+x6F1qA-_eP8|=Yw?(prO
z?@ljx&W^)y+Hw+G>0tuxH|RmP@%Y&;W-XGZ+lwl3Rx!`RdkIoAZUpcQdY!jfm7?ZF
z<qAF}VUyG9ElwSeW4e5#!bWik8^f&i<~K1O&lK(D{0Rq-$VSzk9ZH4NZ}U6x4+>%B
AFaQ7m

diff --git a/SPECS/shim-unsigned-x64.spec b/SPECS/shim-unsigned-x64.spec
index 1bc764c..9cf9443 100644
--- a/SPECS/shim-unsigned-x64.spec
+++ b/SPECS/shim-unsigned-x64.spec
@@ -1,5 +1,6 @@
 %global pesign_vre 0.106-1
 %global openssl_vre 1.0.2j
+%global shim_commit_id afc49558b34548644c1cd0ad1b6526a9470182ed
 
 %global efidir %(eval echo $(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/'))
 %global shimrootdir %{_datadir}/shim/
@@ -19,8 +20,8 @@
 %global dbxfile %{nil}
 
 Name:		shim-unsigned-%{efiarch}
-Version:	15.8
-Release:	2.el9
+Version:	16.1
+Release:	1.el9
 Summary:	First-stage UEFI bootloader
 ExclusiveArch:	x86_64
 License:	BSD
@@ -103,7 +104,7 @@ mkdir build-%{efialtarch}
 cp %{SOURCE3} data/
 
 %build
-COMMIT_ID=5914984a1ffeab841f482c791426d7ca9935a5e6
+COMMIT_ID=%{shim_commit_id}
 MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMIT_ID=${COMMIT_ID} "
 MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
 MAKEFLAGS+="ENABLE_SHIM_HASH=true "
@@ -125,7 +126,7 @@ make ${MAKEFLAGS} \
 cd ..
 
 %install
-COMMIT_ID=5914984a1ffeab841f482c791426d7ca9935a5e6
+COMMIT_ID=%{shim_commit_id}
 MAKEFLAGS="TOPDIR=.. -f ../Makefile COMMIT_ID=${COMMIT_ID} "
 MAKEFLAGS+="EFIDIR=%{efidir} PKGNAME=shim RELEASE=%{release} "
 MAKEFLAGS+="ENABLE_SHIM_HASH=true "
@@ -160,6 +161,10 @@ cd ..
 %files debugsource -f build-%{efiarch}/debugsource.list
 
 %changelog
+* Mon Aug 18 2025 Peter Jones <pjones@redhat.com> - 16.1-1.el9
+- Update to shim-16.1
+  Resolves: RHEL-67333
+
 * Wed Feb 07 2024 Peter Jones <pjones@redhat.com> - 15.8-2.el9
 - Rebuild to fix the commit ident and MAKEFLAGS
   Resolves: RHEL-11262