diff --git a/shim.spec b/shim.spec
index 24ed3de1a90ff8699160dd4650d6150dd88d978d..0fd90be0ab4c624ae2a47980a76aedb8de11e78b 100644
--- a/shim.spec
+++ b/shim.spec
@@ -15,7 +15,7 @@
 Summary:       First-stage UEFI bootloader
 Name:          shim
 Version:       15.7
-Release:       9%{?dist}
+Release:       10%{?dist}
 License:       BSD
 URL:           https://github.com/rhboot/shim
 Source0:       %{url}/releases/download/%{version}/shim-%{version}.tar.bz2
@@ -112,6 +112,9 @@ rm -rf %{buildroot}/usr/src/debug
 %{efi_esp_boot}/*%{efi_arch_upper}.EFI
 
 %changelog
+* Wed Jun 4 2025 Anakin Zhang <anakinzhang@tencent.com> - 15.7-10
+- Rebuilt for TencentOS 4 to support CFCA
+
 * Tue Mar 18 2025 Anakin Zhang <anakinzhang@tencent.com> - 15.7-9
 - Rebuilt for TencentOS 4
 
@@ -125,7 +128,7 @@ rm -rf %{buildroot}/usr/src/debug
 - Rebuilt for loongarch release
 
 * Tue Feb 20 2024 Yi Lin <nilusyi@tencent.com> - 15.7-5
-- fix CVE-2023-40546, CVE-2023-40551, CVE-2023-40550, 
+- fix CVE-2023-40546, CVE-2023-40551, CVE-2023-40550,
   CVE-2023-40549, CVE-2023-40548, CVE-2023-40547
 
 * Thu Nov 16 2023 Xin Cheng <denisecheng@tencent.com> - 15.7-4