(RHSA-2024:2568) Moderate: grafana security update

2024-04-3011:38:54

access.redhat.com

grafana

metrics dashboard

graphite

influxdb

opentsdb

golang-fips

openssl

memory leaks

rsa payloads

cve-2024-1394

authorization bypass

cve-2024-1313

cvss score

references

unix

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
grafana: vulnerable to authorization bypass (CVE-2024-1313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64legrafana-selinux< 9.2.10-16.el9_4grafana-selinux-9.2.10-16.el9_4.ppc64le.rpm
RedHat9x86_64grafana-selinux< 9.2.10-16.el9_4grafana-selinux-9.2.10-16.el9_4.x86_64.rpm
RedHat9aarch64grafana-debugsource< 9.2.10-16.el9_4grafana-debugsource-9.2.10-16.el9_4.aarch64.rpm
RedHat9s390xgrafana-debuginfo< 9.2.10-16.el9_4grafana-debuginfo-9.2.10-16.el9_4.s390x.rpm
RedHat9aarch64grafana< 9.2.10-16.el9_4grafana-9.2.10-16.el9_4.aarch64.rpm
RedHat9x86_64grafana-debuginfo< 9.2.10-16.el9_4grafana-debuginfo-9.2.10-16.el9_4.x86_64.rpm
RedHat9aarch64grafana-selinux< 9.2.10-16.el9_4grafana-selinux-9.2.10-16.el9_4.aarch64.rpm
RedHat9s390xgrafana-debugsource< 9.2.10-16.el9_4grafana-debugsource-9.2.10-16.el9_4.s390x.rpm
RedHat9ppc64legrafana-debugsource< 9.2.10-16.el9_4grafana-debugsource-9.2.10-16.el9_4.ppc64le.rpm
RedHat9s390xgrafana< 9.2.10-16.el9_4grafana-9.2.10-16.el9_4.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	grafana-selinux	< 9.2.10-16.el9_4	grafana-selinux-9.2.10-16.el9_4.ppc64le.rpm
RedHat	9	x86_64	grafana-selinux	< 9.2.10-16.el9_4	grafana-selinux-9.2.10-16.el9_4.x86_64.rpm
RedHat	9	aarch64	grafana-debugsource	< 9.2.10-16.el9_4	grafana-debugsource-9.2.10-16.el9_4.aarch64.rpm
RedHat	9	s390x	grafana-debuginfo	< 9.2.10-16.el9_4	grafana-debuginfo-9.2.10-16.el9_4.s390x.rpm
RedHat	9	aarch64	grafana	< 9.2.10-16.el9_4	grafana-9.2.10-16.el9_4.aarch64.rpm
RedHat	9	x86_64	grafana-debuginfo	< 9.2.10-16.el9_4	grafana-debuginfo-9.2.10-16.el9_4.x86_64.rpm
RedHat	9	aarch64	grafana-selinux	< 9.2.10-16.el9_4	grafana-selinux-9.2.10-16.el9_4.aarch64.rpm
RedHat	9	s390x	grafana-debugsource	< 9.2.10-16.el9_4	grafana-debugsource-9.2.10-16.el9_4.s390x.rpm
RedHat	9	ppc64le	grafana-debugsource	< 9.2.10-16.el9_4	grafana-debugsource-9.2.10-16.el9_4.ppc64le.rpm
RedHat	9	s390x	grafana	< 9.2.10-16.el9_4	grafana-9.2.10-16.el9_4.s390x.rpm