Red Hat Security Advisory

RHSA-2024:8507

grafana security update

Released 2024-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) grafana-6.3.6-6.el8_2, grafana-azure-monitor-6.3.6-6.el8_2, grafana-cloudwatch-6.3.6-6.el8_2 +10

Fixes 1 record

TI-2024-32637 CVE-2024-48949 · GHSA-434g-2637-qmqr

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6…

MEDIUM 40

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00496 Published 2024-10-10 Partial fix · 6.5.6 CWE-347