Moderate: grafana security and enhancement update

2023-11-1400:00:00

errata.almalinux.org

grafana

security fix

azure ad oauth

cve-2023-3128

open source

metrics dashboard

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.9%

JSON

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8x86_64grafana< 9.2.10-7.el8_9.alma.1grafana-9.2.10-7.el8_9.alma.1.x86_64.rpm
almalinux8aarch64grafana< 9.2.10-7.el8_9.alma.1grafana-9.2.10-7.el8_9.alma.1.aarch64.rpm
almalinux8ppc64legrafana< 9.2.10-7.el8_9.alma.1grafana-9.2.10-7.el8_9.alma.1.ppc64le.rpm
almalinux8s390xgrafana< 9.2.10-7.el8_9.alma.1grafana-9.2.10-7.el8_9.alma.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	x86_64	grafana	< 9.2.10-7.el8_9.alma.1	grafana-9.2.10-7.el8_9.alma.1.x86_64.rpm
almalinux	8	aarch64	grafana	< 9.2.10-7.el8_9.alma.1	grafana-9.2.10-7.el8_9.alma.1.aarch64.rpm
almalinux	8	ppc64le	grafana	< 9.2.10-7.el8_9.alma.1	grafana-9.2.10-7.el8_9.alma.1.ppc64le.rpm
almalinux	8	s390x	grafana	< 9.2.10-7.el8_9.alma.1	grafana-9.2.10-7.el8_9.alma.1.s390x.rpm