ALT-PU-2023-4133: package grafana update to version 9.5.5-alt1
Описание
This update upgrades grafana to version 9.5.5-alt1.
Устраненные уязвимости34
Ссылки16
GHSA-3q27-7qjq-p9c5
https://github.com/advisories/GHSA-3q27-7qjq-p9c5GHSA-5mqj-xc49-246p
https://github.com/advisories/GHSA-5mqj-xc49-246pGHSA-69cg-p879-7622
https://github.com/advisories/GHSA-69cg-p879-7622GHSA-69ch-w2m2-3vjp
https://github.com/advisories/GHSA-69ch-w2m2-3vjpGHSA-7rqg-hjwc-6mjf
https://github.com/advisories/GHSA-7rqg-hjwc-6mjfGHSA-cvm3-pp2j-chr3
https://github.com/advisories/GHSA-cvm3-pp2j-chr3GHSA-ff5c-938w-8c9q
https://github.com/advisories/GHSA-ff5c-938w-8c9qGHSA-hjv9-hm2f-rpcj
https://github.com/advisories/GHSA-hjv9-hm2f-rpcjGHSA-mpv3-g8m3-3fjc
https://github.com/advisories/GHSA-mpv3-g8m3-3fjcGHSA-mx47-6497-3fv2
https://github.com/advisories/GHSA-mx47-6497-3fv2GHSA-p978-56hq-r492
https://github.com/advisories/GHSA-p978-56hq-r492GHSA-qrrg-gw7w-vp76
https://github.com/advisories/GHSA-qrrg-gw7w-vp76GHSA-vw7q-p2qg-4m5f
https://github.com/advisories/GHSA-vw7q-p2qg-4m5fGHSA-x2w4-c67p-g44j
https://github.com/advisories/GHSA-x2w4-c67p-g44jGHSA-xw5p-hw8j-xg4q
https://github.com/advisories/GHSA-xw5p-hw8j-xg4qСвязанные уязвимости
ALT-PU-2022-3295: package `grafana` update to version 9.3.1-alt1
Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.
Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.
Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.
Grafana is an open-source platform for monitoring and observability. W ...