AlmaLinuxALSA-2024:1644Important: grafana-pcp security and bug fix update
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.1%
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
- golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
Bug Fix(es):
- TRIAGE CVE-2024-1394 grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:AlmaLinux-30544)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | aarch64 | grafana-pcp | < 5.1.1-2.el8_9.alma.1 | grafana-pcp-5.1.1-2.el8_9.alma.1.aarch64.rpm |
| almalinux | 8 | x86_64 | grafana-pcp | < 5.1.1-2.el8_9.alma.1 | grafana-pcp-5.1.1-2.el8_9.alma.1.x86_64.rpm |
| almalinux | 8 | ppc64le | grafana-pcp | < 5.1.1-2.el8_9.alma.1 | grafana-pcp-5.1.1-2.el8_9.alma.1.ppc64le.rpm |
| almalinux | 8 | s390x | grafana-pcp | < 5.1.1-2.el8_9.alma.1 | grafana-pcp-5.1.1-2.el8_9.alma.1.s390x.rpm |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.1%