ELSA-2024-8678

Опубликовано: 30 окт. 2024

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2024-8678: grafana security update (IMPORTANT)

[9.2.10-19]

Resolves RHEL-62309: CVE-2024-47875

[9.2.10-18]

Resolves RHEL-61049: CVE-2024-9355

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

grafana

9.2.10-19.el9_4

grafana-selinux

9.2.10-19.el9_4

Oracle Linux x86_64

grafana

9.2.10-19.el9_4

grafana-selinux

9.2.10-19.el9_4

Связанные CVE

CVE-2024-9355

CVE-2024-47875

Ссылки на источники

Связанные уязвимости

RLSA-2024:8678

rocky

7 месяцев назад

Important: grafana security update

RLSA-2024:8327

rocky

8 месяцев назад

Important: grafana security update

ELSA-2024-8327

oracle-oval

8 месяцев назад

ELSA-2024-8327: grafana security update (IMPORTANT)

CVE-2024-47875

CVSS3: 10

ubuntu

8 месяцев назад

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

CVE-2024-47875

CVSS3: 8

redhat

8 месяцев назад

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.