Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2022:4219-1

UNKNOWN

Security update for grub2

Published Nov 25, 2022

Modified 3 years ago

Fix available

Details

This update for grub2 fixes the following issues:

CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).

Other:

Bump upstream SBAT generation to 3

Affected Packages

SUSE:Linux Enterprise Micro 5.2grub2

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Micro 5.2grub2-arm64-efi

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Micro 5.2grub2-i386-pc

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Micro 5.2grub2-s390x-emu

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Micro 5.2grub2-snapper-plugin

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Micro 5.2grub2-x86_64-efi

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Micro 5.2grub2-x86_64-xen

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-arm64-efi

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-i386-pc

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-powerpc-ieee1275

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-s390x-emu

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-snapper-plugin

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-systemd-sleep-plugin

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3grub2-x86_64-efi

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Server Applications 15 SP3grub2

Fixed in:

2.04-150300.22.25.1

SUSE:Linux Enterprise Module for Server Applications 15 SP3grub2-x86_64-xen

Fixed in:

2.04-150300.22.25.1

SUSE:Manager Proxy Module 4.2grub2

Fixed in:

2.04-150300.22.25.1

SUSE:Manager Proxy Module 4.2grub2-arm64-efi

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-arm64-efi

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-arm64-efi-debug

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-branding-upstream

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-i386-pc

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-i386-pc-debug

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-powerpc-ieee1275

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-powerpc-ieee1275-debug

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-s390x-emu

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-s390x-emu-debug

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-snapper-plugin

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-systemd-sleep-plugin

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-x86_64-efi

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-x86_64-efi-debug

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap 15.3grub2-x86_64-xen

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap Micro 5.2grub2

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap Micro 5.2grub2-arm64-efi

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap Micro 5.2grub2-i386-pc

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap Micro 5.2grub2-snapper-plugin

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap Micro 5.2grub2-x86_64-efi

Fixed in:

2.04-150300.22.25.1

openSUSE:Leap Micro 5.2grub2-x86_64-xen

Fixed in:

2.04-150300.22.25.1

Timeline

PublishedNov 25, 2022

ModifiedNov 25, 2022

SUSE-SU-2022:4219-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2022:4219-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline