Red Hat Security AdvisoryRHSA-2024:8351
grafana:7.3.6 security update
Released 2024-10-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-7.3.6-8.el8_4
- Red Hat Enterprise Linux AppStream E4S (v.8.4) grafana-7.3.6-8.el8_4
- Red Hat Enterprise Linux AppStream TUS (v.8.4) grafana-7.3.6-8.el8_4
Fixes 1 record
Priority MEDIUM 40
The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00496 · Published 2024-10-10 · Partial fix · 6.5.6 CWE-347
