shim-15.6~rc2

- What's Changed
* SBAT Policy latest should be a one-shot by @jsetje in https://github.com/rhboot/shim/pull/481
* pe: Fix a buffer overflow when SizeOfRawData > VirtualSize by @chriscoulson
* pe: Perform image verification earlier when loading grub by @chriscoulson
* Update advertised sbat generation number for shim by @jsetje
* Update SBAT generation requirements for 05/24/22 by @jsetje
* Also avoid CVE-2022-28737 in verify_image() by @vathpela

- Full Changelog**: https://github.com/rhboot/shim/compare/15.6-rc1..15.6-rc2
-----BEGIN PGP SIGNATURE-----
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=XKlb
-----END PGP SIGNATURE-----