Current shim version:
dnf is trying to update to:
And during the transaction test:
Problem 11: both package shim-x64-13-0.3.x86_64 and shim-ia32-13-0.3.x86_64 obsolete shim < 13-0.3
- cannot install the best update candidate for package shim-0.8-10.x86_64
Only one of those can obsolete "shim". I would make shim-ia32 depend on shim-86_64 instead.
trillian:~/tmp$ rpm -qp shim-ia32-13-0.4.x86_64.rpm --obsoletes
trillian:~/tmp$ rpm -qp shim-ia32-13-0.4.x86_64.rpm --provides
bundled(openssl) = 1.0.2j
shim-ia32 = 13-0.4
shim-ia32(x86-64) = 13-0.4
shim-signed-ia32 = 13-0.4
shim-signed-13-0.4 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-cad5ba1456
13-0.4 was tagged into 27 directly, so closing this.