Oval Definition:oval:com.redhat.rhsa:def:20230752
Revision Date:2023-02-14Version:635
Title:RHSA-2023:0752: grub2 security update (Moderate)
Description:The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

  • grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass (CVE-2022-2601)

  • grub2: Heap based out-of-bounds write when redering certain unicode sequences (CVE-2022-3775)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2022-2601
    CVE-2022-3775
    RHSA-2023:0752
    Platform(s):Red Hat Enterprise Linux 9
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 9 is installed
  • AND
  • grub2-common is earlier than 1:2.06-46.el9_1.3
  • AND grub2-common is signed with Red Hat redhatrelease2 key
  • grub2-efi-aa64 is earlier than 1:2.06-46.el9_1.3
  • AND grub2-efi-aa64 is signed with Red Hat redhatrelease2 key
  • grub2-efi-aa64-cdboot is earlier than 1:2.06-46.el9_1.3
  • AND grub2-efi-aa64-cdboot is signed with Red Hat redhatrelease2 key
  • grub2-efi-aa64-modules is earlier than 1:2.06-46.el9_1.3
  • AND grub2-efi-aa64-modules is signed with Red Hat redhatrelease2 key
  • grub2-efi-x64 is earlier than 1:2.06-46.el9_1.3
  • AND grub2-efi-x64 is signed with Red Hat redhatrelease2 key
  • grub2-efi-x64-cdboot is earlier than 1:2.06-46.el9_1.3
  • AND grub2-efi-x64-cdboot is signed with Red Hat redhatrelease2 key
  • grub2-efi-x64-modules is earlier than 1:2.06-46.el9_1.3
  • AND grub2-efi-x64-modules is signed with Red Hat redhatrelease2 key
  • grub2-pc is earlier than 1:2.06-46.el9_1.3
  • AND grub2-pc is signed with Red Hat redhatrelease2 key
  • grub2-pc-modules is earlier than 1:2.06-46.el9_1.3
  • AND grub2-pc-modules is signed with Red Hat redhatrelease2 key
  • grub2-ppc64le is earlier than 1:2.06-46.el9_1.3
  • AND grub2-ppc64le is signed with Red Hat redhatrelease2 key
  • grub2-ppc64le-modules is earlier than 1:2.06-46.el9_1.3
  • AND grub2-ppc64le-modules is signed with Red Hat redhatrelease2 key
  • grub2-tools is earlier than 1:2.06-46.el9_1.3
  • AND grub2-tools is signed with Red Hat redhatrelease2 key
  • grub2-tools-efi is earlier than 1:2.06-46.el9_1.3
  • AND grub2-tools-efi is signed with Red Hat redhatrelease2 key
  • grub2-tools-extra is earlier than 1:2.06-46.el9_1.3
  • AND grub2-tools-extra is signed with Red Hat redhatrelease2 key
  • grub2-tools-minimal is earlier than 1:2.06-46.el9_1.3
  • AND grub2-tools-minimal is signed with Red Hat redhatrelease2 key
  • BACK