grafana-9.2.10-17.el9_4

エラータID: AXSA:2024-8844:13

Release date: 
Thursday, September 26, 2024 - 15:47
Subject: 
grafana-9.2.10-17.el9_4
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-34156
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Solution: 

Update packages.

CVEs: 
CVE-2024-34156
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
Additional Info: 

N/A

Download: 

SRPMS
  1. grafana-9.2.10-17.el9_4.src.rpm
    MD5: 08f1831a438570a90c0d97d59d8ac268
    SHA-256: 97e11bd3cbee44f4d81268e58f9058481d6b1eb3605c0a0ed53e29d5f5ecc96d
    Size: 321.66 MB

Asianux Server 9 for x86_64
  1. grafana-9.2.10-17.el9_4.x86_64.rpm
    MD5: 766bb8a046d02de4498d1c251b78a10b
    SHA-256: ad36f9784e3ea1d7a719e69749d3b05c943176ea4158827f25f45e73fd6cb87a
    Size: 73.78 MB
  2. grafana-selinux-9.2.10-17.el9_4.x86_64.rpm
    MD5: 72ea16b5cba1958f9c92abc6eaec319a
    SHA-256: f4f8999781f7307696a420d2d872e77024cf311f965300403c3742b1a26c0968
    Size: 24.97 kB