This update for shim fixes the following issues:
- Updated openSUSE signature
- Update the path to grub-tpm.efi in shim-install (boo#1174320)
- Use vendor-dbx to block old SUSE/openSUSE signkeys (boo#1168994)
+ Add dbx-cert.tar.xz which contains the certificates to block
and a script, generate-vendor-dbx.sh, to generate
vendor-dbx.bin
+ Add vendor-dbx.bin as the vendor dbx to block unwanted keys
- Only check EFI variable copying when Secure Boot is enabled (boo#1173411)
- Use the full path of efibootmgr to avoid errors when invoking
shim-install from packagekitd (boo#1168104)
- shim-install: add check for btrfs is used as root file system to enable
relative path lookup for file. (boo#1153953)
- Add shim-opensuse-signed.efi, the openSUSE shim-15+git47 binary
(boo#1113225)
- shim-install: install MokManager to \EFI\boot to process the
pending MOK request (bsc#1175626, bsc#1175656)
- Submitted by Johannes Segitz (jsegitz)