SUSE-SU-2025:0622-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-20250622-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:0622-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:0622-1
- Upstream
- Related
- Published
- 2025-02-21T10:59:56Z
- Modified
- 2025-05-08T17:33:03.211333Z
- Summary
- Security update for grafana
- Details
-
This update for grafana fixes the following issues:
grafana was updated from version 10.4.13 to 10.4.15:
- Security issues fixed:
- CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559)
- CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734)
- CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574)
- CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206)
- Other bugs fixed and changes:
- Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key
- Added provisioning directories
- Use /bin/bash in wrapper scripts
- Security issues fixed:
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-20250622-1/
- https://bugzilla.suse.com/1235206
- https://bugzilla.suse.com/1235574
- https://bugzilla.suse.com/1236559
- https://bugzilla.suse.com/1236734
- https://www.suse.com/security/cve/CVE-2024-11741
- https://www.suse.com/security/cve/CVE-2024-28180
- https://www.suse.com/security/cve/CVE-2024-45339
- https://www.suse.com/security/cve/CVE-2025-21613