grafana-pcp security update

2024-05-1014:32:42

Rockylinux Product Errata

errata.rockylinux.org

grafana-pcp

security update

rocky linux 9

memory leaks

cve-2024-1394

open source

plugin

pcp

cvss score

vulnerability

openssl

golang-fips

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

An update is available for grafana-pcp.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
grafana-pcp is an open source Grafana plugin for PCP.

Security Fix(es):

grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky9aarch64grafana-pcp< 5.1.1-2.el9_3grafana-pcp-0:5.1.1-2.el9_3.aarch64.rpm
rocky9ppc64legrafana-pcp< 5.1.1-2.el9_3grafana-pcp-0:5.1.1-2.el9_3.ppc64le.rpm
rocky9s390xgrafana-pcp< 5.1.1-2.el9_3grafana-pcp-0:5.1.1-2.el9_3.s390x.rpm
rocky9x86_64grafana-pcp< 5.1.1-2.el9_3grafana-pcp-0:5.1.1-2.el9_3.x86_64.rpm
rocky9aarch64grafana-pcp-debuginfo< 5.1.1-2.el9_3grafana-pcp-debuginfo-0:5.1.1-2.el9_3.aarch64.rpm
rocky9ppc64legrafana-pcp-debuginfo< 5.1.1-2.el9_3grafana-pcp-debuginfo-0:5.1.1-2.el9_3.ppc64le.rpm
rocky9s390xgrafana-pcp-debuginfo< 5.1.1-2.el9_3grafana-pcp-debuginfo-0:5.1.1-2.el9_3.s390x.rpm
rocky9x86_64grafana-pcp-debuginfo< 5.1.1-2.el9_3grafana-pcp-debuginfo-0:5.1.1-2.el9_3.x86_64.rpm
rocky9aarch64grafana-pcp-debugsource< 5.1.1-2.el9_3grafana-pcp-debugsource-0:5.1.1-2.el9_3.aarch64.rpm
rocky9ppc64legrafana-pcp-debugsource< 5.1.1-2.el9_3grafana-pcp-debugsource-0:5.1.1-2.el9_3.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	9	aarch64	grafana-pcp	< 5.1.1-2.el9_3	grafana-pcp-0:5.1.1-2.el9_3.aarch64.rpm
rocky	9	ppc64le	grafana-pcp	< 5.1.1-2.el9_3	grafana-pcp-0:5.1.1-2.el9_3.ppc64le.rpm
rocky	9	s390x	grafana-pcp	< 5.1.1-2.el9_3	grafana-pcp-0:5.1.1-2.el9_3.s390x.rpm
rocky	9	x86_64	grafana-pcp	< 5.1.1-2.el9_3	grafana-pcp-0:5.1.1-2.el9_3.x86_64.rpm
rocky	9	aarch64	grafana-pcp-debuginfo	< 5.1.1-2.el9_3	grafana-pcp-debuginfo-0:5.1.1-2.el9_3.aarch64.rpm
rocky	9	ppc64le	grafana-pcp-debuginfo	< 5.1.1-2.el9_3	grafana-pcp-debuginfo-0:5.1.1-2.el9_3.ppc64le.rpm
rocky	9	s390x	grafana-pcp-debuginfo	< 5.1.1-2.el9_3	grafana-pcp-debuginfo-0:5.1.1-2.el9_3.s390x.rpm
rocky	9	x86_64	grafana-pcp-debuginfo	< 5.1.1-2.el9_3	grafana-pcp-debuginfo-0:5.1.1-2.el9_3.x86_64.rpm
rocky	9	aarch64	grafana-pcp-debugsource	< 5.1.1-2.el9_3	grafana-pcp-debugsource-0:5.1.1-2.el9_3.aarch64.rpm
rocky	9	ppc64le	grafana-pcp-debugsource	< 5.1.1-2.el9_3	grafana-pcp-debugsource-0:5.1.1-2.el9_3.ppc64le.rpm