Skip to content
OpenAdvisories
Low ELSA-2022-1781 1 CVE

Low: grafana security, bug fix, and enhancement update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[7.5.11-2]
- resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
- resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files

[7.5.11-1]
- update to 7.5.11 tagged upstream community sources, see CHANGELOG
- resolve CVE-2021-39226

[7.5.10-1]
- update to 7.5.10 tagged upstream community sources, see CHANGELOG

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 grafana 0:7.5.11-2.el8

Vulnerabilities 1

  • Medium 4.3
    CVE-2021-43813 EPSS 57%

    Directory Traversal in Grafana

    Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. The vulnerability is limited in scope, and only allo…

    Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine