grafana-pcp-5.1.1-3.el9_4
エラータID: AXSA:2024-8847:06
Release date:
Thursday, September 26, 2024 - 16:51
Subject:
grafana-pcp-5.1.1-3.el9_4
Affected Channels:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2024-34156
Solution:
Update packages.
CVEs:
CVE-2024-34156
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
Additional Info:
N/A
Download:
SRPMS
- grafana-pcp-5.1.1-3.el9_4.src.rpm
MD5: 5e482d1e2a405d60bc47b76824bc7146
SHA-256: 2eb47865a4f0fdcf39199f7e287dcc91e7f429fe4e9c39a32cce6fe5b9ef9bfe
Size: 59.22 MB
Asianux Server 9 for x86_64
- grafana-pcp-5.1.1-3.el9_4.x86_64.rpm
MD5: 7dbe5d38da6b5013882ba1cabb5de8c9
SHA-256: 56fbf14b4c5136941b801b82d0965acffa89d3ff772f4c8373ad968e4c6c9c26
Size: 10.27 MB