(RHSA-2024:3265) Important: grafana security update

2024-05-2210:41:24

access.redhat.com

grafana

security update

memory leaks

authorization bypass

cve-2024-1394

cve-2024-1313

cvss score

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

Grafana is an open source, feature rich metrics dashboard and graph editor for
Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
grafana: vulnerable to authorization bypass (CVE-2024-1313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8aarch64grafana-debuginfo< 9.2.10-16.el8_10grafana-debuginfo-9.2.10-16.el8_10.aarch64.rpm
RedHat8ppc64legrafana-selinux< 9.2.10-16.el8_10grafana-selinux-9.2.10-16.el8_10.ppc64le.rpm
RedHat8x86_64grafana< 9.2.10-16.el8_10grafana-9.2.10-16.el8_10.x86_64.rpm
RedHat8ppc64legrafana-debuginfo< 9.2.10-16.el8_10grafana-debuginfo-9.2.10-16.el8_10.ppc64le.rpm
RedHat8x86_64grafana-debugsource< 9.2.10-16.el8_10grafana-debugsource-9.2.10-16.el8_10.x86_64.rpm
RedHat8s390xgrafana-selinux< 9.2.10-16.el8_10grafana-selinux-9.2.10-16.el8_10.s390x.rpm
RedHat8s390xgrafana-debuginfo< 9.2.10-16.el8_10grafana-debuginfo-9.2.10-16.el8_10.s390x.rpm
RedHat8s390xgrafana-debugsource< 9.2.10-16.el8_10grafana-debugsource-9.2.10-16.el8_10.s390x.rpm
RedHat8s390xgrafana< 9.2.10-16.el8_10grafana-9.2.10-16.el8_10.s390x.rpm
RedHat8aarch64grafana-debugsource< 9.2.10-16.el8_10grafana-debugsource-9.2.10-16.el8_10.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	aarch64	grafana-debuginfo	< 9.2.10-16.el8_10	grafana-debuginfo-9.2.10-16.el8_10.aarch64.rpm
RedHat	8	ppc64le	grafana-selinux	< 9.2.10-16.el8_10	grafana-selinux-9.2.10-16.el8_10.ppc64le.rpm
RedHat	8	x86_64	grafana	< 9.2.10-16.el8_10	grafana-9.2.10-16.el8_10.x86_64.rpm
RedHat	8	ppc64le	grafana-debuginfo	< 9.2.10-16.el8_10	grafana-debuginfo-9.2.10-16.el8_10.ppc64le.rpm
RedHat	8	x86_64	grafana-debugsource	< 9.2.10-16.el8_10	grafana-debugsource-9.2.10-16.el8_10.x86_64.rpm
RedHat	8	s390x	grafana-selinux	< 9.2.10-16.el8_10	grafana-selinux-9.2.10-16.el8_10.s390x.rpm
RedHat	8	s390x	grafana-debuginfo	< 9.2.10-16.el8_10	grafana-debuginfo-9.2.10-16.el8_10.s390x.rpm
RedHat	8	s390x	grafana-debugsource	< 9.2.10-16.el8_10	grafana-debugsource-9.2.10-16.el8_10.s390x.rpm
RedHat	8	s390x	grafana	< 9.2.10-16.el8_10	grafana-9.2.10-16.el8_10.s390x.rpm
RedHat	8	aarch64	grafana-debugsource	< 9.2.10-16.el8_10	grafana-debugsource-9.2.10-16.el8_10.aarch64.rpm