gpp_maybe Security update for grafana

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-821

This update for grafana fixes the following issues: - CVE-2022-23552: Fixed SVG processing by adding a dompurify preprocessor step (bsc#1207749). - CVE-2022-39324: Fixed originalUrl spoof security issue (bsc#1207750). - CVE-2022-41723: Fixed go issue to avoid quadratic complexity in HPACK decoding (bsc#1208293). - CVE-2022-46146: Fixed basic authentication bypass by updating the exporter toolkit (bsc#1208065). - Trim leading and trailing whitespaces from email and username on signup - Fix invitation validation: Check whether the provided email address is the same as where the invitation is sent

• Release Date
  Mar 20 2023
• References
  Bugzilla: 1208065, 1207750, 1207749, 1208293
  CVEs: CVE-2022-39324, CVE-2022-23552, CVE-2022-46146, CVE-2022-41723
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.4 ppc64le

• Packages
  grafana
  The open-source platform for monitoring and observability

  8.5.20-150200.3.35.1 lock rpm lock src

SUSE Package Hub 15.4 x86_64

• Packages
  grafana
  The open-source platform for monitoring and observability

  8.5.20-150200.3.35.1 lock rpm lock src

SUSE Package Hub 15.4 s390x

• Packages
  grafana
  The open-source platform for monitoring and observability

  8.5.20-150200.3.35.1 lock rpm lock src

SUSE Package Hub 15.4 aarch64

• Packages
  grafana
  The open-source platform for monitoring and observability

  8.5.20-150200.3.35.1 lock rpm lock src