diff --git a/shim.changes b/shim.changes
index 7709e0c..6f4d7dd 100644
--- a/shim.changes
+++ b/shim.changes
@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Fri Jul 29 02:36:36 UTC 2022 - Joey Lee <jlee@suse.com>
+
+- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)
+
+-------------------------------------------------------------------
+Mon Jul 25 12:44:24 UTC 2022 - Joey Lee <jlee@suse.com>
+
+- Revoked the change in shim.spec for "use common SBAT values (boo#1193282)"
+  - we need to build openSUSE Tumbleweed's shim on Leap 15.4 because Factory
+    is unstable for building out a stable shim binary for signing. (bsc#1198458)
+  - But the rpm-config-suse package in Leap 15.4 is direct copied from SLE 15.4
+    because closing-the-leap-gap. So sbat_distro_* variables are SLE version,
+    not for openSUSE. (bsc#1198458)
+
 -------------------------------------------------------------------
 Tue Jun 28 04:03:45 UTC 2022 - Joey Lee <jlee@suse.com>
 
diff --git a/shim.spec b/shim.spec
index 1567522..1f99a89 100644
--- a/shim.spec
+++ b/shim.spec
@@ -35,13 +35,6 @@
 %endif
 %endif
 
-%if %{defined sbat_distro}
-# SBAT metadata
-%define sbat_generation 1
-%else
-%{error please define sbat_distro, sbat_distro_summary and sbat_distro_url}
-%endif
-
 Name:           shim
 Version:        15.6
 Release:        0
@@ -134,10 +127,17 @@ The source code of UEFI shim loader
 %patch100 -p1
 
 %build
-%if 0%{?sbat_generation}
 # generate the vendor SBAT metadata
-echo "shim.%{sbat_distro},%{sbat_generation},%{sbat_distro_summary},%{name},%{version},%{sbat_distro_url}" > data/sbat.vendor.csv
+%if 0%{?is_opensuse} == 1 || 0%{?sle_version} == 0
+distro_id="opensuse"
+distro_name="The openSUSE project"
+%else
+distro_id="sle"
+distro_name="SUSE Linux Enterprise"
 %endif
+distro_sbat=1
+sbat="shim.${distro_id},${distro_sbat},${distro_name},%{name},%{version},mail:security@suse.de"
+echo "${sbat}" > data/sbat.vendor.csv
 
 # first, build MokManager and fallback as they don't depend on a
 # specific certificate