Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:8678

Опубликовано: 08 нояб. 2024
Источник: rocky
Оценка: Important

Описание

Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)

  • dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
grafanax86_6419.el9_4grafana-9.2.10-19.el9_4.x86_64.rpm
grafana-selinuxx86_6419.el9_4grafana-selinux-9.2.10-19.el9_4.x86_64.rpm

Показывать по

Связанные CVE

CVE-2024-47875
CVE-2024-9355

Ссылки на источники

Исправления

Связанные уязвимости

rocky логотип

RLSA-2024:8327

rocky
9 месяцев назад

Important: grafana security update

oracle-oval логотип

ELSA-2024-8678

oracle-oval
9 месяцев назад

ELSA-2024-8678: grafana security update (IMPORTANT)

oracle-oval логотип

ELSA-2024-8327

oracle-oval
10 месяцев назад

ELSA-2024-8327: grafana security update (IMPORTANT)

ubuntu логотип

CVE-2024-47875

CVSS3: 10
ubuntu
10 месяцев назад

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

redhat логотип

CVE-2024-47875

CVSS3: 8
redhat
10 месяцев назад

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.