diff --git a/edk2.spec b/edk2.spec
index 76b1d27..7235978 100644
--- a/edk2.spec
+++ b/edk2.spec
@@ -14,6 +14,8 @@ ExclusiveArch: x86_64 aarch64
 %define TOOLCHAIN      GCC5
 %define OPENSSL_VER    1.1.1k
 
+%define DBXDATE        20220812
+
 %if %{defined rhel}
 %define build_ovmf 0
 %define build_aarch64 0
@@ -76,8 +78,8 @@ Source81: edk2-build.fedora
 Source82: edk2-build.fedora.platforms
 Source83: edk2-build.rhel-9
 
-Source90: DBXUpdate-20220812.x64.bin
-Source91: DBXUpdate-20220812.ia32.bin
+Source90: DBXUpdate-%{DBXDATE}.x64.bin
+Source91: DBXUpdate-%{DBXDATE}.ia32.bin
 
 Patch0001: 0001-BaseTools-do-not-build-BrotliCompress-RH-only.patch
 Patch0002: 0002-MdeModulePkg-remove-package-private-Brotli-include-p.patch
@@ -335,7 +337,7 @@ touch OvmfPkg/AmdSev/Grub/grub.efi   # dummy
 ./edk2-build.py --config edk2-build.rhel-9 --silent --release-date "$RELEASE_DATE" -m ovmf
 virt-fw-vars --input   RHEL-9/ovmf/OVMF_VARS.fd \
              --output  RHEL-9/ovmf/OVMF_VARS.secboot.fd \
-             --set-dbx DBXUpdate-20220812.x64.bin \
+             --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
              --enroll-redhat --secure-boot
 build_iso RHEL-9/ovmf
 
@@ -345,15 +347,15 @@ build_iso RHEL-9/ovmf
 ./edk2-build.py --config edk2-build.fedora.platforms --silent -m x64
 virt-fw-vars --input   Fedora/ovmf/OVMF_VARS.fd \
              --output  Fedora/ovmf/OVMF_VARS.secboot.fd \
-             --set-dbx DBXUpdate-20220812.x64.bin \
+             --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
              --enroll-redhat --secure-boot
 virt-fw-vars --input   Fedora/ovmf-4m/OVMF_VARS.fd \
              --output  Fedora/ovmf-4m/OVMF_VARS.secboot.fd \
-             --set-dbx DBXUpdate-20220812.x64.bin \
+             --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
              --enroll-redhat --secure-boot
 virt-fw-vars --input   Fedora/ovmf-ia32/OVMF_VARS.fd \
              --output  Fedora/ovmf-ia32/OVMF_VARS.secboot.fd \
-             --set-dbx DBXUpdate-20220812.ia32.bin \
+             --set-dbx DBXUpdate-%{DBXDATE}.ia32.bin \
              --enroll-redhat --secure-boot
 build_iso Fedora/ovmf
 build_iso Fedora/ovmf-ia32
@@ -361,7 +363,7 @@ build_iso Fedora/ovmf-ia32
 # experimental stateless builds
 virt-fw-vars --input   Fedora/experimental/OVMF.stateless.fd \
              --output  Fedora/experimental/OVMF.stateless.secboot.fd \
-             --set-dbx DBXUpdate-20220812.x64.bin \
+             --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
              --enroll-redhat --secure-boot
 
 for image in \