Current shim version: shim-0.8-10.x86_64 dnf is trying to update to: shim-ia32-13-0.3 and: shim-x64-13-0.3 And during the transaction test: Problem 11: both package shim-x64-13-0.3.x86_64 and shim-ia32-13-0.3.x86_64 obsolete shim < 13-0.3 - cannot install the best update candidate for package shim-0.8-10.x86_64 Only one of those can obsolete "shim". I would make shim-ia32 depend on shim-86_64 instead.
trillian:~/tmp$ rpm -qp shim-ia32-13-0.4.x86_64.rpm --obsoletes trillian:~/tmp$ rpm -qp shim-ia32-13-0.4.x86_64.rpm --provides bundled(openssl) = 1.0.2j shim-ia32 = 13-0.4 shim-ia32(x86-64) = 13-0.4 shim-signed-ia32 = 13-0.4 trillian:~/tmp$
shim-signed-13-0.4 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-cad5ba1456
13-0.4 was tagged into 27 directly, so closing this.