Bug 2177381

Summary: OVMF missing 4meg version causing Windows VMs to fail update KB5012170
Product: [Fedora] Fedora Reporter: Joseph D. Wagner <joe>
Component: edk2Assignee: Paolo Bonzini <pbonzini>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 37CC: berrange, crobinso, kraxel, pbonzini, philmd, virt-maint
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Joseph D. Wagner 2023-03-11 10:09:27 UTC 
Windows 10/11 Security Update KB5012170 attempts to ensure the UEFI has an updated certificate revocation list. However, updating the list would push the OVMF image over the 2 MEG limit. This leads to Windows Update performing never-ending retries on Windows 10/11 KVM clients.

Windows 10/11 VM's need to use the 4Meg version of the OVMF image, but this version is not included in the latest build from Fedora, even though it is available upsteam and on other distros.

Please update the package build to include the OVMF 4Meg version.