(In reply to Ludwig Nussel from comment #5) > I missed this one. Please revert this ASAP. The shim package is meant to > build properly and MUST NOT contain a binary. The shim-leap package is meant > to repackage the binary. And even that one MUST come from a properly built > rpm. > > To avoid breaking the binary rebuild we can implement other means, like > blocking binutils updates until we have a new signature. The change wasn't merged into Leap 15.1 actually. Tumbleweed and Leap 15.1 still uses shim 14 which is from Leap 15.0.