Lucene search
AlmaLinuxALSA-2021:1859HistoryMay 18, 2021 - 6:16 a.m.
Moderate: grafana security, bug fix, and enhancement update
2021-05-1806:16:06
errata.almalinux.org
14
0.013 Low
EPSS
Percentile
85.6%
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
The following packages have been upgraded to a later upstream version: grafana (7.3.6). (BZ#1850471)
Security Fix(es):
-
crewjam/saml: authentication bypass in saml authentication (CVE-2020-27846)
-
grafana: XSS via a query alias for the Elasticsearch and Testdata datasource (CVE-2020-24303)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | x86_64 | grafana | < 7.3.6-2.el8 | grafana-7.3.6-2.el8.x86_64.rpm |
Related
osv
osv
Moderate: grafana security, bug fix, and enhancement update
2021-05-18 06:16:06
BIT-grafana-2020-27846
2024-03-06 11:00:29
CVE-2020-27846
2020-12-21 16:15:13
redhat
redhat
nessus
nessus
RHEL 8 : grafana (RHSA-2021:1859)
2021-05-19 00:00:00
Rocky Linux 8 : grafana (RLSA-2021:1859)
2023-11-07 00:00:00
NewStart CGSL MAIN 6.02 : grafana Multiple Vulnerabilities (NS-SA-2022-0053)
2022-05-10 00:00:00
oraclelinux
oraclelinux
grafana security, bug fix, and enhancement update
2021-05-25 00:00:00
rocky
rocky
grafana security, bug fix, and enhancement update
2021-05-18 06:16:06
fedora
fedora
[SECURITY] Fedora 33 Update: grafana-7.3.6-1.fc33
2021-01-05 01:26:51
[SECURITY] Fedora 32 Update: grafana-7.3.6-1.fc32
2021-01-05 01:19:14
redhatcve
redhatcve
openvas
openvas
Fedora: Security Advisory for grafana (FEDORA-2020-64e54abd9f)
2021-01-11 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2020-968067abfa)
2021-01-11 00:00:00
Grafana < 7.1.0-beta1 XSS Vulnerability
2020-10-29 00:00:00
cvelist
cvelist
CVE-2020-27846
2020-12-21 15:16:14
CVE-2020-24303
2020-10-28 13:25:22
nvd
nvd
CVE-2020-27846
2020-12-21 16:15:13
CVE-2020-24303
2020-10-28 14:15:12
veracode
veracode
Insecure XML Parsing
2020-12-22 04:41:46
Cross-site Scripting (XSS)
2020-10-29 02:12:41
prion
prion
Design/Logic Flaw
2020-12-21 16:15:00
Design/Logic Flaw
2020-10-28 14:15:00
github
github
XML Processing error in github.com/crewjam/saml
2021-06-23 17:29:42
Grafana XSS via a query alias for the ElasticSearch datasource
2022-05-24 17:32:32
cve
cve
CVE-2020-27846
2020-12-21 16:15:13
CVE-2020-24303
2020-10-28 14:15:12
ubuntucve
ubuntucve
CVE-2020-24303
2020-10-28 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2299
2023-11-21 12:53:33