Red Hat Product Errata RHSA-2024:1646 - Security Advisory
Issued:
2024-04-02
Updated:
2024-04-02

RHSA-2024:1646 - Security Advisory

Synopsis

Important: grafana security and bug fix update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for grafana is now available for Red Hat Enterprise Linux 8.

'Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

Bug Fix(es):

  • TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:RHEL-30543)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 2262921 - CVE-2024-1394 golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

Red Hat Enterprise Linux for x86_64 8

SRPM
grafana-9.2.10-8.el8_9.src.rpm SHA-256: 109519576a33327b2e87539ee662a3508f6855d30bea3dc66023b995112e3665
x86_64
grafana-9.2.10-8.el8_9.x86_64.rpm SHA-256: c2e87df1de9900994af813fcc1a8bf61f7100ffd426998cb77b411f5f12ea784
grafana-debuginfo-9.2.10-8.el8_9.x86_64.rpm SHA-256: bbb825c8b3908b44b5a4b5f73f60f21e45328aa2f5547341591e8a330f530e54
grafana-debugsource-9.2.10-8.el8_9.x86_64.rpm SHA-256: 620030abd683ed1e14c24bb2684ecd5cd1af8dd7ebdf87809714f63fccc6915a

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
grafana-9.2.10-8.el8_9.src.rpm SHA-256: 109519576a33327b2e87539ee662a3508f6855d30bea3dc66023b995112e3665
s390x
grafana-9.2.10-8.el8_9.s390x.rpm SHA-256: 5226fd9564e1809ff7e36b8cdffb05c4672b1443e0961d45a2efdb964b06dfb1
grafana-debuginfo-9.2.10-8.el8_9.s390x.rpm SHA-256: 3bc0a6cbeaebdce5c6e0d0725cbcd398fdf3dbe084db3b714904d509c6b4bb6a
grafana-debugsource-9.2.10-8.el8_9.s390x.rpm SHA-256: 996b727f238af4a85af7c5c730c6ebda53557937ccc9827818ad39dca69dc547

Red Hat Enterprise Linux for Power, little endian 8

SRPM
grafana-9.2.10-8.el8_9.src.rpm SHA-256: 109519576a33327b2e87539ee662a3508f6855d30bea3dc66023b995112e3665
ppc64le
grafana-9.2.10-8.el8_9.ppc64le.rpm SHA-256: f050c4a714055d20dcb29b44a5b255a6c29aee993b5de8471a509400fbe51c13
grafana-debuginfo-9.2.10-8.el8_9.ppc64le.rpm SHA-256: 5185b96eaf3788dd04c769e47ed2fac366420a69991cce4961bd5ccb1a990283
grafana-debugsource-9.2.10-8.el8_9.ppc64le.rpm SHA-256: 6f646a5520586e8398f7c6277c8d1105ef09680697a5593f92a8e725a00f317e

Red Hat Enterprise Linux for ARM 64 8

SRPM
grafana-9.2.10-8.el8_9.src.rpm SHA-256: 109519576a33327b2e87539ee662a3508f6855d30bea3dc66023b995112e3665
aarch64
grafana-9.2.10-8.el8_9.aarch64.rpm SHA-256: f62c9e71bc2c125ddf23599cec6dbbbcc9e7b2f73e18dccd56f6f2225178ff96
grafana-debuginfo-9.2.10-8.el8_9.aarch64.rpm SHA-256: b037d0ca0799be8b0c7aeeaa2b8a985d14876bb766c173a3ee50cd48a58fdedf
grafana-debugsource-9.2.10-8.el8_9.aarch64.rpm SHA-256: 67a5778b4dcab6d6b72b0a72a67bd5a574ec26808cb8c3ff0d6483c34a8d427d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.