CLSA-2023-1674815966

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2023-1674815966
Upstream
Published
2023-01-27T10:39:26Z
Modified
2026-06-01T00:33:20.354246804Z
Summary
grub2: Fix of 2 CVEs
Details
  • font: Reject glyphs exceeds font->maxglyphwidth or font->max_glyph height
  • font: Fix size overflow in grubfontgetglyphinternal()
  • CVE-2022-2601: font: Fix several integer overflows in grubfontconstruct_glyph()
  • CVE-2022-3775: font: Fix an integer underflow in blit_comb()
References

Affected packages

TuxCare:CentOS:8.4
grub2-common

Package

Name
grub2-common
Purl
pkg:rpm/tuxcare/grub2-common?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-efi-ia32

Package

Name
grub2-efi-ia32
Purl
pkg:rpm/tuxcare/grub2-efi-ia32?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-efi-ia32-cdboot

Package

Name
grub2-efi-ia32-cdboot
Purl
pkg:rpm/tuxcare/grub2-efi-ia32-cdboot?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-efi-ia32-modules

Package

Name
grub2-efi-ia32-modules
Purl
pkg:rpm/tuxcare/grub2-efi-ia32-modules?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-efi-x64

Package

Name
grub2-efi-x64
Purl
pkg:rpm/tuxcare/grub2-efi-x64?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-efi-x64-cdboot

Package

Name
grub2-efi-x64-cdboot
Purl
pkg:rpm/tuxcare/grub2-efi-x64-cdboot?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-efi-x64-modules

Package

Name
grub2-efi-x64-modules
Purl
pkg:rpm/tuxcare/grub2-efi-x64-modules?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-pc

Package

Name
grub2-pc
Purl
pkg:rpm/tuxcare/grub2-pc?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-pc-modules

Package

Name
grub2-pc-modules
Purl
pkg:rpm/tuxcare/grub2-pc-modules?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-tools

Package

Name
grub2-tools
Purl
pkg:rpm/tuxcare/grub2-tools?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-tools-efi

Package

Name
grub2-tools-efi
Purl
pkg:rpm/tuxcare/grub2-tools-efi?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-tools-extra

Package

Name
grub2-tools-extra
Purl
pkg:rpm/tuxcare/grub2-tools-extra?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"
grub2-tools-minimal

Package

Name
grub2-tools-minimal
Purl
pkg:rpm/tuxcare/grub2-tools-minimal?distro=centos-8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-106.el8.tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2023-1674815966.json"