gpp_maybe Security update for grafana

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-623

This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734) * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574) * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206) - Other bugs fixed and changes: * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key * Added provisioning directories * Use /bin/bash in wrapper scripts

Release Date

Feb 21 2025
References

Bugzilla: 1235206, 1236734, 1235574, 1236559
CVEs: CVE-2024-11741, CVE-2025-21613, CVE-2024-45339, CVE-2024-28180
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.6 aarch64

Packages

grafana
The open-source platform for monitoring and observability

10.4.15-150200.3.64.1 lock rpm lock src

SUSE Package Hub 15.6 ppc64le

Packages

grafana
The open-source platform for monitoring and observability

10.4.15-150200.3.64.1 lock rpm lock src

SUSE Package Hub 15.6 s390x

Packages

grafana
The open-source platform for monitoring and observability

10.4.15-150200.3.64.1 lock rpm lock src

SUSE Package Hub 15.6 x86_64

Packages

grafana
The open-source platform for monitoring and observability

10.4.15-150200.3.64.1 lock rpm lock src