Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Rocky Linux 9: RLSA-2024:8678 important: grafana XSS and buffer overflow

rocky
Calendar Grey November 8, 2024
Scroller Rockylinux
Keep abreast of essential Grafana upgrades for Rocky Linux, which tackle critical security vulnerabilities and revisions.
Important: grafana security update

Summary

An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory buffer overflow XSS security fix grafana Rocky Linux

RPMs

grafana-0:9.2.10-19.el9_4.aarch64.rpm

grafana-0:9.2.10-19.el9_4.ppc64le.rpm

grafana-0:9.2.10-19.el9_4.s390x.rpm

grafana-0:9.2.10-19.el9_4.src.rpm

grafana-0:9.2.10-19.el9_4.x86_64.rpm

grafana-debuginfo-0:9.2.10-19.el9_4.aarch64.rpm

grafana-debuginfo-0:9.2.10-19.el9_4.ppc64le.rpm

grafana-debuginfo-0:9.2.10-19.el9_4.s390x.rpm

grafana-debuginfo-0:9.2.10-19.el9_4.x86_64.rpm

grafana-debugsource-0:9.2.10-19.el9_4.aarch64.rpm

grafana-debugsource-0:9.2.10-19.el9_4.ppc64le.rpm

grafana-debugsource-0:9.2.10-19.el9_4.s390x.rpm

grafana-debugsource-0:9.2.10-19.el9_4.x86_64.rpm

grafana-selinux-0:9.2.10-19.el9_4.aarch64.rpm

grafana-selinux-0:9.2.10-19.el9_4.ppc64le.rpm

grafana-selinux-0:9.2.10-19.el9_4.s390x.rpm

grafana-selinux-0:9.2.10-19.el9_4.x86_64.rpm

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2024-47875

https://www.cve.org/CVERecord?id=CVE-2024-9355

Severity
important
Lowest
Low
Medium
High
Critical

Name: RLSA-2024:8678
Affected Products: Rocky Linux 9

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2315719

https://bugzilla.redhat.com/show_bug.cgi?id=2318052


Topics%20covered

Topics Covered

security advisory buffer overflow XSS security fix grafana Rocky Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.