Skip to content
OpenAdvisories
High ELSA-2025-0401 2 CVEs

Important: grafana security update (Oracle Linux 8)

Published Jan 19, 2025 · Updated Jan 19, 2025

Ecosystem: Oracle Linux

Summary

[9.2.10-21]
- Resolves RHEL-72881: CVE-2025-21614
- Resolves RHEL-72869: CVE-2025-21613

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 grafana 0:9.2.10-21.el8_10
Oracle Linux · 8 grafana-selinux 0:9.2.10-21.el8_10

Vulnerabilities 2

  • Critical 9.2
    CVE-2025-21613

    go-git has an Argument Injection via the URL field

    go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • High 7.5
    CVE-2025-21614

    go-git clients vulnerable to DoS via maliciously crafted Git server replies

    go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing spec…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go