golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

- Rebuild for new golang release
- Fix CVE-2023-39325 and CVE-2023-44487
2024-04-03 12:53:45 +00:00 · 2023-11-15 12:23:47 +03:00 · 2023-10-19 13:04:56 +03:00
1 changed files with 8 additions and 2 deletions
--- a/SPECS/grafana.spec
+++ b/SPECS/grafana.spec
@ -33,7 +33,7 @@ end}

 Name:             grafana
 Version:          9.2.10
-Release:          6%{?dist}
+Release:          8%{?dist}.alma.1
 Summary:          Metrics dashboard and graph editor
 License:          AGPLv3
 URL:              https://grafana.org
@ -90,7 +90,7 @@ ExclusiveArch:    %{grafana_arches}

 BuildRequires:    systemd
 BuildRequires:    systemd-rpm-macros
-BuildRequires:    golang >= 1.17
+BuildRequires:    golang
 BuildRequires:    go-srpm-macros
 %if 0%{?rhel} >= 9
 BuildRequires:    go-rpm-macros
@ -933,6 +933,12 @@ OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryptio


 %changelog
+* Wed Apr 03 2024 Andrew Lukoshko <alukoshko@almalinux.org> 9.2.10-8.alma.1
+- golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
+
+* Thu Oct 19 2023 Eduard Abdullin <eabdullin@almalinux.org> 9.2.10-7.alma.1
+- Rebuild for new golang release
+
 * Fri Jul 21 2023 Stan Cox <scox@redhat.com> 9.2.10-6
 - Add /usr/share/grafana to systemd-sysusers --replace
Author	SHA1	Message	Date
Andrew Lukoshko	6f6ca55526	golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)	2024-04-03 12:53:45 +00:00
eabdullin	0457d50b64	- Rebuild for new golang release	2023-11-15 12:23:47 +03:00
eabdullin	d1614682ed	- Fix CVE-2023-39325 and CVE-2023-44487	2023-10-19 13:04:56 +03:00