FEDORA-2022-7ce9378e90

Details

put the font back in /boot for now

Yes, this bloats size by a couple meg. Hopefully this won't cause problems for anyone and everyone can be okay with this CVE fix update.

Adjust the way we provide unicode.pf2 for post-CVE lockdown policy

Two font-related CVE updates (CVE-2022-2601 and CVE-2022-3775). For more information, see upstream's disclosure or the patches themselves.

Affected Packages(31 packages)

grub2

Fedora 35

Fixed in:

2.06-14.fc35

grub2-common

Fedora 35

Fixed in:

2.06-14.fc35

grub2-debuginfo

Fedora 35

Fixed in:

2.06-14.fc35

grub2-debugsource

Fedora 35

Fixed in:

2.06-14.fc35

grub2-efi-aa64

Fedora 35

Fixed in:

2.06-14.fc35

grub2-efi-aa64-cdboot

Fedora 35

Fixed in:

2.06-14.fc35

grub2-efi-aa64-modules

Fedora 35

Fixed in:

2.06-14.fc35

grub2-efi-arm

Fedora 35

Fixed in:

2.06-14.fc35

grub2-efi-arm-cdboot

Fedora 35

Fixed in:

2.06-14.fc35

grub2-efi-arm-modules

Fedora 35

Fixed in:

2.06-14.fc35

References

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2143725

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2144113

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2146545