RHSA-2024:8327
RHSA-2024:8327 · Red Hat Security Advisory: grafana security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: grafana security update
CVSS 8.0 · High · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
grafana Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:9.2.10-20.el8_10
Update to 0:9.2.10-20.el8_10
grafana-debuginfo Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:9.2.10-20.el8_10
Update to 0:9.2.10-20.el8_10
grafana-debugsource Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:9.2.10-20.el8_10
Update to 0:9.2.10-20.el8_10
grafana-selinux Red Hat:enterprise_linux:8::appstream
- Affected ranges
- ECOSYSTEM: < 0:9.2.10-20.el8_10
Update to 0:9.2.10-20.el8_10
Original sources
- https://access.redhat.com/errata/RHSA-2024:8327
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2315719
- https://bugzilla.redhat.com/show_bug.cgi?id=2318052
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8327.json
- https://access.redhat.com/security/cve/CVE-2024-9355
- https://www.cve.org/CVERecord?id=CVE-2024-9355
- https://nvd.nist.gov/vuln/detail/CVE-2024-9355
- https://github.com/golang-fips/openssl/pull/198
- https://access.redhat.com/security/cve/CVE-2024-47875
- https://www.cve.org/CVERecord?id=CVE-2024-47875
- https://nvd.nist.gov/vuln/detail/CVE-2024-47875
- https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098
- https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f
- https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a
- https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf
- https://osv.dev/vulnerability/RHSA-2024:8327