diff --git a/.shim.metadata b/.shim.metadata
index ca47a99..bd1dd4b 100644
--- a/.shim.metadata
+++ b/.shim.metadata
@@ -1,4 +1,4 @@
-cf5667660f4920bc291595441e27e82578b4103d SOURCES/fbx64.efi
-c51e8bfbb8d340a130c7e2b45edbd46ad2bda8f1 SOURCES/mmx64.efi
-750bd7932437b1fb6610c233f69db1b70d67fab1 SOURCES/shimaa64.efi
-7476966216dd8c2e6c2203728a01719be289dd54 SOURCES/shimx64.efi
+9ca9cfa834aedfaf3efe2216bfa1cb7c286ee1c0 SOURCES/fbx64.efi
+5eb0ac78eee6aeeaf44a3f11d002b4fe00af6916 SOURCES/mmx64.efi
+4312f246b6ba692040383f10358ac9a5927207de SOURCES/shimaa64.efi
+783fb77783e9d0c4c400b723dfd0f02f006616ae SOURCES/shimx64.efi
diff --git a/SOURCES/shim.rpmmacros b/SOURCES/shim.rpmmacros
index 00f1b51..d1379ff 100644
--- a/SOURCES/shim.rpmmacros
+++ b/SOURCES/shim.rpmmacros
@@ -20,7 +20,7 @@
 #%%global mmefiarm %%{expand:%%{SOURCE43}
 
 %global shimveraa64 15-6.el9
-%global shimverx64 15.5-1.el9
+%global shimverx64 15.6-1.el9
 #%%global shimverarm 15-1.el8
 
 %global shimdiraa64 %{_datadir}/shim/%{shimveraa64}/aa64
diff --git a/SPECS/shim.spec b/SPECS/shim.spec
index 21f97a4..cae3ba6 100644
--- a/SPECS/shim.spec
+++ b/SPECS/shim.spec
@@ -1,6 +1,6 @@
 Name:		shim
-Version:	15.5
-Release:	2.el9
+Version:	15.6
+Release:	1.el9
 Summary:	First-stage UEFI bootloader
 License:	BSD
 URL:		https://github.com/rhboot/shim/
@@ -40,7 +40,7 @@ BuildRequires:	pesign >= 0.112-20.fc27
 # we can just BuildRequires that.
 %ifarch x86_64
 ## BuildRequires:	%% {unsignedx64} = %% {shimverx64}
-BuildRequires:	shim-unsigned-x64 = 15.5-1.el9
+BuildRequires:	shim-unsigned-x64 = 15.6-1.el9
 %endif
 %ifarch aarch64
 BuildRequires:	%{unsignedaa64} = %{shimveraa64}
@@ -104,6 +104,10 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
 %endif
 
 %changelog
+* Mon Jun 06 2022 Peter Jones <pjones@redhat.com> - 15.6-1.el9
+- Update to shim-15.6
+  Resolves: CVE-2022-28737
+
 * Thu Apr 14 2022 Peter Jones <pjones@redhat.com> - 15.5-2.el9
 - Attempt to make aarch64 build.
   Related: rhbz#1932057