SUSE-SU-2022:4219-1

UNKNOWN

Security update for grub2

Published Nov 25, 2022

Modified 3 years ago

Fix available

Details

This update for grub2 fixes the following issues:

CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).

Other:

Bump upstream SBAT generation to 3

Affected Packages(15 packages)

grub2

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Module for Basesystem 15 SP3SUSE Linux Enterprise Module for Server Applications 15 SP3SUSE Manager Proxy Module 4.2openSUSE Leap 15.3

Fixed in:

2.04-150300.22.25.1

grub2-arm64-efi

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Module for Basesystem 15 SP3SUSE Manager Proxy Module 4.2openSUSE Leap 15.3openSUSE Leap Micro 5.2

Fixed in:

2.04-150300.22.25.1

grub2-i386-pc

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Module for Basesystem 15 SP3openSUSE Leap 15.3openSUSE Leap Micro 5.2

Fixed in:

2.04-150300.22.25.1

grub2-s390x-emu

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Module for Basesystem 15 SP3openSUSE Leap 15.3

Fixed in:

2.04-150300.22.25.1

grub2-snapper-plugin

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Module for Basesystem 15 SP3openSUSE Leap 15.3openSUSE Leap Micro 5.2