Oracle Linux: CVE-2025-21614: ELSA-2025-0401: grafana security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2025-21614: ELSA-2025-0401:grafana security update (IMPORTANT) (Multiple Advisories)

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

01/06/2025

Created

01/23/2025

Added

01/20/2025

Modified

01/27/2025

Description

go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability. A denial of service (DoS) vulnerability was found in go-git. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which triggers resource exhaustion in go-git clients.

Solution(s)

• oracle-linux-upgrade-grafana
• oracle-linux-upgrade-grafana-selinux

References

• https://attackerkb.com/topics/cve-2025-21614
• CVE - 2025-21614
• ELSA-2025-0401