Sorry, we're still waiting for the shim-review to get the signature from UEFI CA. Without the signature, I cannot update shim package :-\ https://github.com/rhboot/shim-review/issues/188