Issued at: 2024-04-05
Updated at: 2024-04-05
Synopsis
Important: grafana security and bug fix update
Description
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
Bug Fix(es):
* TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:Rocky Linux-30543)
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
2262921
CVEs
CVE-2024-1394
Affected packages
Rocky Linux 8 aarch64 - AppStream
grafana-0:9.2.10-8.el8_9.aarch64.rpm
grafana-0:9.2.10-8.el8_9.src.rpm
grafana-debuginfo-0:9.2.10-8.el8_9.aarch64.rpm
grafana-debugsource-0:9.2.10-8.el8_9.aarch64.rpm
Rocky Linux 8 x86_64 - AppStream
grafana-0:9.2.10-8.el8_9.src.rpm
grafana-0:9.2.10-8.el8_9.x86_64.rpm
grafana-debuginfo-0:9.2.10-8.el8_9.x86_64.rpm
grafana-debugsource-0:9.2.10-8.el8_9.x86_64.rpm