Critical: grafana security update

2023-07-1200:00:00

errata.almalinux.org

0.001 Low

EPSS

Percentile

40.9%

JSON

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9ppc64legrafana< 9.0.9-3.el9_2.almagrafana-9.0.9-3.el9_2.alma.ppc64le.rpm
almalinux9aarch64grafana< 9.0.9-3.el9_2.almagrafana-9.0.9-3.el9_2.alma.aarch64.rpm
almalinux9x86_64grafana< 9.0.9-3.el9_2.almagrafana-9.0.9-3.el9_2.alma.x86_64.rpm
almalinux9s390xgrafana< 9.0.9-3.el9_2.almagrafana-9.0.9-3.el9_2.alma.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	ppc64le	grafana	< 9.0.9-3.el9_2.alma	grafana-9.0.9-3.el9_2.alma.ppc64le.rpm
almalinux	9	aarch64	grafana	< 9.0.9-3.el9_2.alma	grafana-9.0.9-3.el9_2.alma.aarch64.rpm
almalinux	9	x86_64	grafana	< 9.0.9-3.el9_2.alma	grafana-9.0.9-3.el9_2.alma.x86_64.rpm
almalinux	9	s390x	grafana	< 9.0.9-3.el9_2.alma	grafana-9.0.9-3.el9_2.alma.s390x.rpm