ELSA-2024-8327

Опубликовано: 22 окт. 2024

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2024-8327: grafana security update (IMPORTANT)

[9.2.10-20]

Resolves RHEL-62307: CVE-2024-47875

[9.2.10-19]

Resolves RHEL-61779: CVE-2024-9355

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

grafana

9.2.10-20.el8_10

grafana-selinux

9.2.10-20.el8_10

Oracle Linux x86_64

grafana

9.2.10-20.el8_10

grafana-selinux

9.2.10-20.el8_10

Связанные CVE

CVE-2024-47875

CVE-2024-9355

Ссылки на источники

Связанные уязвимости

RLSA-2024:8678

rocky

7 месяцев назад

Important: grafana security update

RLSA-2024:8327

rocky

8 месяцев назад

Important: grafana security update

ELSA-2024-8678

oracle-oval

8 месяцев назад

ELSA-2024-8678: grafana security update (IMPORTANT)

CVE-2024-47875

CVSS3: 10

ubuntu

8 месяцев назад

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

CVE-2024-47875

CVSS3: 8

redhat

8 месяцев назад

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.