Oval Definition:oval:com.redhat.rhsa:def:20230049
Revision Date:2023-01-09Version:635
Title:RHSA-2023:0049: grub2 security update (Moderate)
Description:The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

  • grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass (CVE-2022-2601)

  • grub2: Heap based out-of-bounds write when redering certain unicode sequences (CVE-2022-3775)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2022-2601
    CVE-2022-3775
    RHSA-2023:0049
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • grub2-common is earlier than 1:2.02-142.el8_7.1
  • AND grub2-common is signed with Red Hat redhatrelease2 key
  • grub2-efi-aa64 is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-aa64 is signed with Red Hat redhatrelease2 key
  • grub2-efi-aa64-cdboot is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-aa64-cdboot is signed with Red Hat redhatrelease2 key
  • grub2-efi-aa64-modules is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-aa64-modules is signed with Red Hat redhatrelease2 key
  • grub2-efi-ia32 is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-ia32 is signed with Red Hat redhatrelease2 key
  • grub2-efi-ia32-cdboot is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-ia32-cdboot is signed with Red Hat redhatrelease2 key
  • grub2-efi-ia32-modules is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-ia32-modules is signed with Red Hat redhatrelease2 key
  • grub2-efi-x64 is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-x64 is signed with Red Hat redhatrelease2 key
  • grub2-efi-x64-cdboot is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-x64-cdboot is signed with Red Hat redhatrelease2 key
  • grub2-efi-x64-modules is earlier than 1:2.02-142.el8_7.1
  • AND grub2-efi-x64-modules is signed with Red Hat redhatrelease2 key
  • grub2-pc is earlier than 1:2.02-142.el8_7.1
  • AND grub2-pc is signed with Red Hat redhatrelease2 key
  • grub2-pc-modules is earlier than 1:2.02-142.el8_7.1
  • AND grub2-pc-modules is signed with Red Hat redhatrelease2 key
  • grub2-ppc64le is earlier than 1:2.02-142.el8_7.1
  • AND grub2-ppc64le is signed with Red Hat redhatrelease2 key
  • grub2-ppc64le-modules is earlier than 1:2.02-142.el8_7.1
  • AND grub2-ppc64le-modules is signed with Red Hat redhatrelease2 key
  • grub2-tools is earlier than 1:2.02-142.el8_7.1
  • AND grub2-tools is signed with Red Hat redhatrelease2 key
  • grub2-tools-efi is earlier than 1:2.02-142.el8_7.1
  • AND grub2-tools-efi is signed with Red Hat redhatrelease2 key
  • grub2-tools-extra is earlier than 1:2.02-142.el8_7.1
  • AND grub2-tools-extra is signed with Red Hat redhatrelease2 key
  • grub2-tools-minimal is earlier than 1:2.02-142.el8_7.1
  • AND grub2-tools-minimal is signed with Red Hat redhatrelease2 key
  • BACK