Summary
[2.06-46.0.4]
- Bump SBAT metadata for grub to 3 [Orabug: 34872719]
[2.06-46.0.3]
- Fix CVE-2022-2601 and CVE-2022-3775 [Orabug: 34871953]
- Enable signing for aarch64 EFI
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | grub2-common | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-efi-aa64 | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-efi-aa64-cdboot | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-efi-aa64-modules | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-efi-x64 | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-efi-x64-cdboot | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-efi-x64-modules | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-pc | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-pc-modules | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-tools | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-tools-efi | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-tools-extra | 1:2.06-46.0.4.el9 |
| Oracle Linux · 9 | grub2-tools-minimal | 1:2.06-46.0.4.el9 |
Vulnerabilities 2
-
High 8.6
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when c…
-
High 7.1
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and h…