Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

SUSE: 2025:0622-1 important: grafana security update for multiple issues

suse
Calendar Grey February 21, 2025
Scroller Suse
Address major security risks within Grafana following the recent SUSE advisory to enhance system resilience.
* bsc#1235206 * bsc#1235574 * bsc#1236559 * bsc#1236734

Summary

## This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: * Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734) * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574) * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206) * Other bugs fixed and changes: * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key * Added provisioning directories * Use /bin/bash in wrapper scripts ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Topics%20covered

Topics Covered

security advisory security issue update DoS patch important SUSE software security important update grafana

References

* bsc#1235206

* bsc#1235574

* bsc#1236559

* bsc#1236734

Cross-

* CVE-2024-11741

* CVE-2024-28180

* CVE-2024-45339

* CVE-2025-21613

CVSS scores:

* CVE-2024-11741 ( SUSE ): 2.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-11741 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2024-11741 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2024-28180 ( SUSE ): 2.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2024-28180 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-28180 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-45339 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:0622-1
Release Date: 2025-02-21T10:59:57Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue update DoS patch important SUSE software security important update grafana

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.