RLSA-2024:5291

Описание

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

• golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

• golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

• golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.