Submitted the fix for SLE15, sr#289462. As for Tumbleweed, upgrading pesign to 116 requires efivar 38 which couldn't be built with LTO/PIE(*), so I'd merge the upstream patch first and upgrade pesign when efivar are ready. (*) https://bugzilla.suse.com/show_bug.cgi?id=1206388