Grub2 updates for Red Hat systems are making some unbootable

Does installation media need to up updated to include newly signed components? Once dbxtool for a distribution has been updated, and the UEFI revocation list rejects older grub2 or shims, one needs an installation media with the newer grub2/shims, or a re-installed system won't boot without disabling secure boot, unless I'm missing something. Are there signs of installation media/ISO being reissued with these patches? It looks like RedHat OpenShift/CoreOS is only being distributed with new boot images, but haven't seen evidence of updated installation media for the rest of RedHat so far. System rescue images are also likely to need updating. It looks like Debian 10.5 will be issued with these patches, so at least it's installation and live media will be available on August 1.

Also check your BIOS vendor, at least HP (not to be confused with HPE) has reported that a BIOS update is required for some of their models before installing the new revocation list.