grafana-9.2.10-32.el8_10
エラータID: AXSA:2026-1417:20
リリース日:
2026/08/03 Monday - 20:24
題名:
grafana-9.2.10-32.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Go の Billy ライブラリには、リソースの制限を実施していない
問題があるため、リモートの攻撃者により、サービス拒否攻撃 (DoS) を
可能とする脆弱性が存在します。(CVE-2026-44740)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-44740
Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumption. These issues arise from insufficient validation and missing safety mechanisms such as cycle detection, recursion limits, or defensive handling of unexpected states when processing untrusted repository data and filesystem structures. This issue has been patched in versions 5.9.0 and 6.0.0-alpha.1.
Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumption. These issues arise from insufficient validation and missing safety mechanisms such as cycle detection, recursion limits, or defensive handling of unexpected states when processing untrusted repository data and filesystem structures. This issue has been patched in versions 5.9.0 and 6.0.0-alpha.1.
追加情報:
N/A
ダウンロード:
SRPMS
- grafana-9.2.10-32.el8_10.src.rpm
MD5: ff0bed19d52cba4d1fc2d88e9ec0b09c
SHA-256: 981165603f1468b18eb37911e4c3dd5710507cecc09272b44d885632a7816f63
Size: 326.62 MB
Asianux Server 8 for x86_64
- grafana-9.2.10-32.el8_10.x86_64.rpm
MD5: 8eec2bd184c12804fca3b20ecbb44a48
SHA-256: e7a7e53b2925841b4449b3636dca4189a14bb4e42a62e0555fbfe43d25119a76
Size: 77.38 MB - grafana-selinux-9.2.10-32.el8_10.x86_64.rpm
MD5: 9d46e132ee4d54985182ab27f9e71339
SHA-256: 3c7e56f356ab8a291dafaab6ba3c0b2739081deb9ec89bb2b5fdabb5d3010890
Size: 35.86 kB
English