From 848c1c1e21ec89edbbfa83a5a58e0f6dbb4942bc Mon Sep 17 00:00:00 2001
From: AlmaLinux <backport@almalinux>
Date: Thu, 30 Jul 2026 12:26:01 +0000
Subject: [PATCH] shimx64.efi is signed with MSFT2023 key only, NOT FOR
 PRODUCTION

---
 .shim.metadata  | 2 +-
 SPECS/shim.spec | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/.shim.metadata b/.shim.metadata
index f06ddac..fa19a69 100644
--- a/.shim.metadata
+++ b/.shim.metadata
@@ -3,4 +3,4 @@
 0dfbc60bb515830779115580cb23e2df6cd02906 SOURCES/mmaa64.efi
 c5b15cc7e0c29119467804e0671a6bef049e1d17 SOURCES/mmx64.efi
 03ff27cdfc981bd3c4afce0c8deab4175618a07e SOURCES/shimaa64.efi
-03ba5f1ca6d83d48248471649cb73daeba1a32ea SOURCES/shimx64.efi
+7d8431477dff837054cf5f3f20e535c0b632775d SOURCES/shimx64.efi
diff --git a/SPECS/shim.spec b/SPECS/shim.spec
index 62e9f33..58a0e1b 100644
--- a/SPECS/shim.spec
+++ b/SPECS/shim.spec
@@ -4,7 +4,7 @@
 
 Name:		shim
 Version:	16.1
-Release:	5%{?dist}.alma.1
+Release:	5%{?dist}.alma.2023
 Summary:	First-stage UEFI bootloader
 License:	BSD
 URL:		https://github.com/rhboot/shim/
@@ -108,6 +108,9 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
 %endif
 
 %changelog
+* Thu Jul 30 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 16.1-5.el9.alma.2023
+- shimx64.efi is signed with MSFT2023 key only, NOT FOR PRODUCTION
+
 * Mon Feb 16 2026 Andrew Lukoshko <alukoshko@almalinux.org> - 16.1-5.el9.alma.1
 - Update to 16.1