What were you trying to do that didn't work?

There were 2 advisories released to customers for shim to rhel8

• shim-x64-15.8-4.el8_9: https://access.redhat.com/errata/RHSA-2024:1902
• shim-x64-15.8-2.el8_10: https://access.redhat.com/errata/RHBA-2024:3238

The version in rhel 8.10 is lower than in 8.9. One would need to downgrade shim to get the version from 8.10

[GCC 11.5.0 20240719 (Red Hat 11.5.0-2)] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import rpm
>>> rpm.ver('shim-15.8-4.el8_9') < rpm.ver('shim-15.8-2.el8_10')
False

What is the impact of this issue to you?

RHEL cloud images for AWS and Azure are built from the RHEL 8.10 compose.
and thus they got installed lower version than in the rhel 8.9

Please provide the package NVR for which the bug is seen:

• shim-15.8-2.el8_10

How reproducible is this bug?:

Deterministic

Expected results

version of shim in rhel 8.10 is bigger than version in rhel 8.9 "shim-15.8-4.el8_9"

Additional Info

Report from AWS team mentioned.

If you launch either of those AMIs and run an update,
you’ll see that both AMIs install the newer version of the package.

But the update of shim from the latest version of rhel 8.10 will update to the version of shim released for rhel 8.9.