gpp_maybe Security update for grafana

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-3765

This update for grafana fixes the following issues: Updated to version 8.3.10 (jsc#SLE-24565, jsc#SLE-23422, jsc#SLE-23439): - CVE-2022-31097: Fixed XSS vulnerability in the Unified Alerting (bsc#1201535). - CVE-2022-31107: Fixed OAuth account takeover vulnerability (bsc#1201539). - CVE-2022-21702: Fixed XSS through attacker-controlled data source (bsc#1195726). - CVE-2022-21703: Fixed Cross Site Request Forgery (bsc#1195727). - CVE-2022-21713: Fixed Teams API IDOR (bsc#1195728).

Release Date

Oct 26 2022
References

Bugzilla: 1201539, 1201535, 1195726, 1195727, 1195728
CVEs: CVE-2022-31097, CVE-2022-31107, CVE-2022-21702, CVE-2022-21703, CVE-2022-21713
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.4 s390x

Packages

grafana
The open-source platform for monitoring and observability

8.3.10-150200.3.26.1 lock rpm lock src

SUSE Package Hub 15.4 aarch64

Packages

grafana
The open-source platform for monitoring and observability

8.3.10-150200.3.26.1 lock rpm lock src

SUSE Package Hub 15.4 ppc64le

Packages

grafana
The open-source platform for monitoring and observability

8.3.10-150200.3.26.1 lock rpm lock src

SUSE Package Hub 15.4 x86_64

Packages

grafana
The open-source platform for monitoring and observability

8.3.10-150200.3.26.1 lock rpm lock src