Red Hat Product Errata RHSA-2024:2569 - Security Advisory
Issued:
2024-04-30
Updated:
2024-04-30

RHSA-2024:2569 - Security Advisory

Synopsis

Important: grafana-pcp security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for grafana is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

grafana-pcp is an open source Grafana plugin for PCP.

Security Fix(es):

  • grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2262921 - CVE-2024-1394 golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

Red Hat Enterprise Linux for x86_64 9

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
s390x
grafana-pcp-5.1.1-2.el9_4.s390x.rpm SHA-256: fbde1edfd51a3381533953ce58e4061242cb2645ef1e489bd8ac92a2758f44f7
grafana-pcp-debuginfo-5.1.1-2.el9_4.s390x.rpm SHA-256: 279f2a2588654f1e2efd7b953ce67b8976bbfa82281cc6ee05c5eecc4e1dae60
grafana-pcp-debugsource-5.1.1-2.el9_4.s390x.rpm SHA-256: beed358ff1d22816684ab557e05dae2b1025c34a0aa8b5eac57e6421f906cec0

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
s390x
grafana-pcp-5.1.1-2.el9_4.s390x.rpm SHA-256: fbde1edfd51a3381533953ce58e4061242cb2645ef1e489bd8ac92a2758f44f7
grafana-pcp-debuginfo-5.1.1-2.el9_4.s390x.rpm SHA-256: 279f2a2588654f1e2efd7b953ce67b8976bbfa82281cc6ee05c5eecc4e1dae60
grafana-pcp-debugsource-5.1.1-2.el9_4.s390x.rpm SHA-256: beed358ff1d22816684ab557e05dae2b1025c34a0aa8b5eac57e6421f906cec0

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
s390x
grafana-pcp-5.1.1-2.el9_4.s390x.rpm SHA-256: fbde1edfd51a3381533953ce58e4061242cb2645ef1e489bd8ac92a2758f44f7
grafana-pcp-debuginfo-5.1.1-2.el9_4.s390x.rpm SHA-256: 279f2a2588654f1e2efd7b953ce67b8976bbfa82281cc6ee05c5eecc4e1dae60
grafana-pcp-debugsource-5.1.1-2.el9_4.s390x.rpm SHA-256: beed358ff1d22816684ab557e05dae2b1025c34a0aa8b5eac57e6421f906cec0

Red Hat Enterprise Linux for Power, little endian 9

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
ppc64le
grafana-pcp-5.1.1-2.el9_4.ppc64le.rpm SHA-256: e241e54dcee525c279e2d04bad839488cdaee3730ebd8c9d087a7ef2a4f7f4f8
grafana-pcp-debuginfo-5.1.1-2.el9_4.ppc64le.rpm SHA-256: fecdd5f0cc48525fc4872ceb7152a981ae5ad6e5fb100033f2ea9ca157e8c1de
grafana-pcp-debugsource-5.1.1-2.el9_4.ppc64le.rpm SHA-256: d41b05e1835b1c18eb49de827a83c93ae5e212bee54dafe05cfa9e126f3aed3d

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
ppc64le
grafana-pcp-5.1.1-2.el9_4.ppc64le.rpm SHA-256: e241e54dcee525c279e2d04bad839488cdaee3730ebd8c9d087a7ef2a4f7f4f8
grafana-pcp-debuginfo-5.1.1-2.el9_4.ppc64le.rpm SHA-256: fecdd5f0cc48525fc4872ceb7152a981ae5ad6e5fb100033f2ea9ca157e8c1de
grafana-pcp-debugsource-5.1.1-2.el9_4.ppc64le.rpm SHA-256: d41b05e1835b1c18eb49de827a83c93ae5e212bee54dafe05cfa9e126f3aed3d

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
ppc64le
grafana-pcp-5.1.1-2.el9_4.ppc64le.rpm SHA-256: e241e54dcee525c279e2d04bad839488cdaee3730ebd8c9d087a7ef2a4f7f4f8
grafana-pcp-debuginfo-5.1.1-2.el9_4.ppc64le.rpm SHA-256: fecdd5f0cc48525fc4872ceb7152a981ae5ad6e5fb100033f2ea9ca157e8c1de
grafana-pcp-debugsource-5.1.1-2.el9_4.ppc64le.rpm SHA-256: d41b05e1835b1c18eb49de827a83c93ae5e212bee54dafe05cfa9e126f3aed3d

Red Hat Enterprise Linux for ARM 64 9

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
aarch64
grafana-pcp-5.1.1-2.el9_4.aarch64.rpm SHA-256: 3b329058495b35541fc8cc25121a814524744f92ee9b58a163036838a74fcccc
grafana-pcp-debuginfo-5.1.1-2.el9_4.aarch64.rpm SHA-256: 48e05d770b471975ae17d0d7943e9e25533ae1783a43f3e279d6d613270be536
grafana-pcp-debugsource-5.1.1-2.el9_4.aarch64.rpm SHA-256: 704e0c2aa47144212a054e63873f53015944e4cf5097302c7ef3af87ff606a42

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
aarch64
grafana-pcp-5.1.1-2.el9_4.aarch64.rpm SHA-256: 3b329058495b35541fc8cc25121a814524744f92ee9b58a163036838a74fcccc
grafana-pcp-debuginfo-5.1.1-2.el9_4.aarch64.rpm SHA-256: 48e05d770b471975ae17d0d7943e9e25533ae1783a43f3e279d6d613270be536
grafana-pcp-debugsource-5.1.1-2.el9_4.aarch64.rpm SHA-256: 704e0c2aa47144212a054e63873f53015944e4cf5097302c7ef3af87ff606a42

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
aarch64
grafana-pcp-5.1.1-2.el9_4.aarch64.rpm SHA-256: 3b329058495b35541fc8cc25121a814524744f92ee9b58a163036838a74fcccc
grafana-pcp-debuginfo-5.1.1-2.el9_4.aarch64.rpm SHA-256: 48e05d770b471975ae17d0d7943e9e25533ae1783a43f3e279d6d613270be536
grafana-pcp-debugsource-5.1.1-2.el9_4.aarch64.rpm SHA-256: 704e0c2aa47144212a054e63873f53015944e4cf5097302c7ef3af87ff606a42

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
ppc64le
grafana-pcp-5.1.1-2.el9_4.ppc64le.rpm SHA-256: e241e54dcee525c279e2d04bad839488cdaee3730ebd8c9d087a7ef2a4f7f4f8
grafana-pcp-debuginfo-5.1.1-2.el9_4.ppc64le.rpm SHA-256: fecdd5f0cc48525fc4872ceb7152a981ae5ad6e5fb100033f2ea9ca157e8c1de
grafana-pcp-debugsource-5.1.1-2.el9_4.ppc64le.rpm SHA-256: d41b05e1835b1c18eb49de827a83c93ae5e212bee54dafe05cfa9e126f3aed3d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
ppc64le
grafana-pcp-5.1.1-2.el9_4.ppc64le.rpm SHA-256: e241e54dcee525c279e2d04bad839488cdaee3730ebd8c9d087a7ef2a4f7f4f8
grafana-pcp-debuginfo-5.1.1-2.el9_4.ppc64le.rpm SHA-256: fecdd5f0cc48525fc4872ceb7152a981ae5ad6e5fb100033f2ea9ca157e8c1de
grafana-pcp-debugsource-5.1.1-2.el9_4.ppc64le.rpm SHA-256: d41b05e1835b1c18eb49de827a83c93ae5e212bee54dafe05cfa9e126f3aed3d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
x86_64
grafana-pcp-5.1.1-2.el9_4.x86_64.rpm SHA-256: ca9e8e8b9c06e87f04efb4411648f189b9a7f7dbbd35b8a42f1321b9bcbd6757
grafana-pcp-debuginfo-5.1.1-2.el9_4.x86_64.rpm SHA-256: 767a98e7cb6eb10ac95e8688eddaa77ae60a81a6089f485886de7e868d759cc6
grafana-pcp-debugsource-5.1.1-2.el9_4.x86_64.rpm SHA-256: d72f246ed7e1483c7be0866c3bac197c60146660a47d4c8fce3734403a2496d7

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
aarch64
grafana-pcp-5.1.1-2.el9_4.aarch64.rpm SHA-256: 3b329058495b35541fc8cc25121a814524744f92ee9b58a163036838a74fcccc
grafana-pcp-debuginfo-5.1.1-2.el9_4.aarch64.rpm SHA-256: 48e05d770b471975ae17d0d7943e9e25533ae1783a43f3e279d6d613270be536
grafana-pcp-debugsource-5.1.1-2.el9_4.aarch64.rpm SHA-256: 704e0c2aa47144212a054e63873f53015944e4cf5097302c7ef3af87ff606a42

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
aarch64
grafana-pcp-5.1.1-2.el9_4.aarch64.rpm SHA-256: 3b329058495b35541fc8cc25121a814524744f92ee9b58a163036838a74fcccc
grafana-pcp-debuginfo-5.1.1-2.el9_4.aarch64.rpm SHA-256: 48e05d770b471975ae17d0d7943e9e25533ae1783a43f3e279d6d613270be536
grafana-pcp-debugsource-5.1.1-2.el9_4.aarch64.rpm SHA-256: 704e0c2aa47144212a054e63873f53015944e4cf5097302c7ef3af87ff606a42

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
s390x
grafana-pcp-5.1.1-2.el9_4.s390x.rpm SHA-256: fbde1edfd51a3381533953ce58e4061242cb2645ef1e489bd8ac92a2758f44f7
grafana-pcp-debuginfo-5.1.1-2.el9_4.s390x.rpm SHA-256: 279f2a2588654f1e2efd7b953ce67b8976bbfa82281cc6ee05c5eecc4e1dae60
grafana-pcp-debugsource-5.1.1-2.el9_4.s390x.rpm SHA-256: beed358ff1d22816684ab557e05dae2b1025c34a0aa8b5eac57e6421f906cec0

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
grafana-pcp-5.1.1-2.el9_4.src.rpm SHA-256: 425494df3e582c29e24716f90642786a5f36a5f0b8581b09e8606161e1aa0607
s390x
grafana-pcp-5.1.1-2.el9_4.s390x.rpm SHA-256: fbde1edfd51a3381533953ce58e4061242cb2645ef1e489bd8ac92a2758f44f7
grafana-pcp-debuginfo-5.1.1-2.el9_4.s390x.rpm SHA-256: 279f2a2588654f1e2efd7b953ce67b8976bbfa82281cc6ee05c5eecc4e1dae60
grafana-pcp-debugsource-5.1.1-2.el9_4.s390x.rpm SHA-256: beed358ff1d22816684ab557e05dae2b1025c34a0aa8b5eac57e6421f906cec0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.