{"id":"CLSA-2023-1674816097","summary":"grub2: Fix of 2 CVEs","details":"- font: Reject glyphs exceeds font-\u003emax_glyph_width or font-\u003emax_glyph height\n- font: Fix size overflow in grub_font_get_glyph_internal()\n- CVE-2022-2601: font: Fix several integer overflows in grub_font_construct_glyph()\n- CVE-2022-3775: font: Fix an integer underflow in blit_comb()","modified":"2026-05-27T11:16:21.769809935Z","published":"2023-01-27T10:41:37Z","upstream":["CVE-2022-2601","CVE-2022-3775"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1674816097.html"}],"affected":[{"package":{"name":"grub2-common","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-common?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-efi-ia32","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-efi-ia32?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-efi-ia32-cdboot","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-efi-ia32-cdboot?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-efi-ia32-modules","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-efi-ia32-modules?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-efi-x64","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-efi-x64?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-efi-x64-cdboot","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-efi-x64-cdboot?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-efi-x64-modules","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-efi-x64-modules?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-pc","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-pc?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-pc-modules","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-pc-modules?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-tools","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-tools?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-tools-efi","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-tools-efi?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-tools-extra","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-tools-extra?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}},{"package":{"name":"grub2-tools-minimal","ecosystem":"TuxCare:CentOS:8.5","purl":"pkg:rpm/tuxcare/grub2-tools-minimal?distro=centos-8.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2023-1674816097.json"}}],"schema_version":"1.7.5"}