Описание
ELSA-2020-1659: grafana security, bug fix, and enhancement update (MODERATE)
[6.3.6-1]
- add weak depenency on grafana-pcp
- add patch to mute shellcheck SC1090 for grafana-cli
- update to 6.3.6 upstream community sources, see CHANGELOG
[6.3.5-1]
- drop uaparser patch now its upstream
- add xerrors patch, see https://github.com/golang/go/issues/32246
- use vendor sources on rawhide until modules are fully supported
- update to latest upstream community sources, see CHANGELOG
[6.3.4-1]
- include fix for CVE-2019-15043
- add patch for uaparser on 32bit systems
- update to latest upstream community sources, see CHANGELOG
[6.2.5-1]
- update to latest upstream community sources, see CHANGELOG
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
grafana
6.3.6-1.el8
grafana-azure-monitor
6.3.6-1.el8
grafana-cloudwatch
6.3.6-1.el8
grafana-elasticsearch
6.3.6-1.el8
grafana-graphite
6.3.6-1.el8
grafana-influxdb
6.3.6-1.el8
grafana-loki
6.3.6-1.el8
grafana-mssql
6.3.6-1.el8
grafana-mysql
6.3.6-1.el8
grafana-opentsdb
6.3.6-1.el8
grafana-postgres
6.3.6-1.el8
grafana-prometheus
6.3.6-1.el8
grafana-stackdriver
6.3.6-1.el8
Oracle Linux x86_64
grafana
6.3.6-1.el8
grafana-azure-monitor
6.3.6-1.el8
grafana-cloudwatch
6.3.6-1.el8
grafana-elasticsearch
6.3.6-1.el8
grafana-graphite
6.3.6-1.el8
grafana-influxdb
6.3.6-1.el8
grafana-loki
6.3.6-1.el8
grafana-mssql
6.3.6-1.el8
grafana-mysql
6.3.6-1.el8
grafana-opentsdb
6.3.6-1.el8
grafana-postgres
6.3.6-1.el8
grafana-prometheus
6.3.6-1.el8
grafana-stackdriver
6.3.6-1.el8
Связанные CVE
Связанные уязвимости
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow u ...
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.