Binary files /tmp/tmpXm7bk3/l9vtsKQbcu/secureboot-db-1.7/data-amd64/updates/dbx/dbxupdate_x64.bin and /tmp/tmpXm7bk3/VOAx6XXSTr/secureboot-db-1.8/data-amd64/updates/dbx/dbxupdate_x64.bin differ
Binary files /tmp/tmpXm7bk3/l9vtsKQbcu/secureboot-db-1.7/data-arm64/updates/dbx/dbxupdate_arm64.bin and /tmp/tmpXm7bk3/VOAx6XXSTr/secureboot-db-1.8/data-arm64/updates/dbx/dbxupdate_arm64.bin differ
Binary files /tmp/tmpXm7bk3/l9vtsKQbcu/secureboot-db-1.7/data-i386/updates/dbx/dbxupdate_x86.bin and /tmp/tmpXm7bk3/VOAx6XXSTr/secureboot-db-1.8/data-i386/updates/dbx/dbxupdate_x86.bin differ
diff -Nru secureboot-db-1.7/debian/changelog secureboot-db-1.8/debian/changelog
--- secureboot-db-1.7/debian/changelog	2020-08-26 19:56:04.000000000 +0000
+++ secureboot-db-1.8/debian/changelog	2020-10-19 20:15:23.000000000 +0000
@@ -1,3 +1,12 @@
+secureboot-db (1.8) groovy; urgency=medium
+
+  * Roll back the dbx updates to the version prior to 1.6 (the 2020 MS
+    updates) due to concerns raised about breaking compatibility with Fedora
+    whose current shim is blacklisted by the new update.  Updates will be
+    rolled out again later in a coordinated fashion.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 19 Oct 2020 13:15:23 -0700
+
 secureboot-db (1.7) groovy; urgency=medium
 
   * secureboot-db.service: Ignore sbkeysync failures, which is expected