Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

SUSE: 2025:0624-1 Important: grafana security issues resolved

suse
Calendar Grey February 21, 2025
Scroller Suse
SUSE has released a security patch for Grafana, addressing critical vulnerabilities such as CVE-2024-11741.
* bsc#1235206 * bsc#1235574 * bsc#1236559 * bsc#1236734

Summary

## This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: * Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734) * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574) * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206) * Other bugs fixed and changes: * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key * Added provisioning directories * Use /bin/bash in wrapper scripts ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Topics%20covered

Topics Covered

security advisory security issue update software patch patch important SUSE grafana

References

* bsc#1235206

* bsc#1235574

* bsc#1236559

* bsc#1236734

Cross-

* CVE-2024-11741

* CVE-2024-28180

* CVE-2024-45339

* CVE-2025-21613

CVSS scores:

* CVE-2024-11741 ( SUSE ): 2.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-11741 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2024-11741 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

* CVE-2024-28180 ( SUSE ): 2.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2024-28180 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-28180 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2024-45339 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:0624-1
Release Date: 2025-02-21T11:00:27Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue update software patch patch important SUSE grafana

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.