SUSE-SU-2025:0623-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 21 Feb 2025, 11:00
Last modified:04 Feb 2026, 03:08

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Feb 2025, 11:00
Published
Vulnerability first disclosed
04 Feb 2026, 03:08
Last Modified
Vulnerability information updated

Description

Security update for grafana This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOps integration (bsc#1236734) * CVE-2025-21613: Removed vulnerable library github.com/go-git/go-git/v5 (bsc#1235574) * CVE-2024-28180: Fixed improper handling of highly compressed data (bsc#1235206) - Other bugs fixed and changes: * Alerting: Do not fetch Orgs if the user is authenticated by apikey/sa or render key * Added provisioning directories * Use /bin/bash in wrapper scripts

Affected Systems

  • opensuse•grafana&distro=openSUSE Leap 15.6

    < 10.4.15-150200.3.64.1

  • suse•grafana&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6

    < 10.4.15-150200.3.64.1

References (9)