Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Grafana-PCP may leak memory during encryption
published 2 years ago
Summary
The Grafana plugin for Performance Co-Pilot on AlmaLinux can lose memory when encrypting or decrypting data, which could cause the application to become slower or stop working. This issue is fixed in the latest update. Apply the provided update to restore normal performance.
What to do
- Update almalinux grafana-pcp to version 5.1.1-2.el8_9.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | grafana-pcp |
< 5.1.1-2.el8_9.alma.1 Fix: upgrade to 5.1.1-2.el8_9.alma.1
|
Original advisory text
Important: grafana-pcp security and bug fix update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
Bug Fix(es):
* TRIAGE CVE-2024-1394 grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:AlmaLinux-30544)
Security Fix(es):
* golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
Bug Fix(es):
* TRIAGE CVE-2024-1394 grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:AlmaLinux-30544)
References
- https://access.redhat.com/errata/RHSA-2024:1644 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-1394 Third Party Advisory
- https://bugzilla.redhat.com/2262921 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2024-1644.html Vendor Advisory
Timeline
Published2 Apr 2024
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2024:1644 · OSV
Track software like this
Free during beta