Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-2584

Низкий

ALT-PU-2022-2584: package loki update to version 2.6.1-alt2

Источник
errata.altlinux.org
Дата публикации
08.09.2022
Дата обновления
08.09.2022
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades loki to version 2.6.1-alt2.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 5.3
redhat
больше 5 лет назад

An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Loki will attempt to parse a rules file at that location and include some of the contents in the error message.

CVSS3: 5.3
nvd
больше 5 лет назад

An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Loki will attempt to parse a rules file at that location and include some of the contents in the error message.

CVSS3: 5.3
github
около 5 лет назад

Path traversal in Grafana Loki

CVSS3: 5.3
altlinux
около 5 лет назад

ALT-PU-2021-2558: package `loki` update to version 2.3.0-alt1