Lucene search
OracleLinuxELSA-2023-2784HistoryMay 24, 2023 - 12:00 a.m.
grafana security update
2023-05-2400:00:00
linux.oracle.com
35
grafana
security update
cve-2022-39229
cve-2022-27664
cve-2022-41715
cve-2022-2880
integration tests
fips patch
unix
EPSS
0.002
Percentile
62.1%
[7.5.15-4]
- resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
- resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
- resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
- resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
- run integration tests in check phase
- update FIPS patch with latest changes in Go packaging
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | grafana | < 7.5.15-4.el8 | grafana-7.5.15-4.el8.src.rpm |
| oracle linux | 8 | aarch64 | grafana | < 7.5.15-4.el8 | grafana-7.5.15-4.el8.aarch64.rpm |
| oracle linux | 8 | src | grafana | < 7.5.15-4.el8 | grafana-7.5.15-4.el8.src.rpm |
| oracle linux | 8 | x86_64 | grafana | < 7.5.15-4.el8 | grafana-7.5.15-4.el8.x86_64.rpm |
Related
nessus
nessus
Oracle Linux 8 : grafana (ELSA-2023-2784)
2023-05-24 00:00:00
CentOS 8 : grafana (CESA-2023:2784)
2023-05-16 00:00:00
AlmaLinux 8 : grafana (ALSA-2023:2784)
2023-05-21 00:00:00
osv
osv
Moderate: grafana security update
2023-05-16 00:00:00
Moderate: grafana security and enhancement update
2023-05-09 00:00:00
Moderate: Image Builder security, bug fix, and enhancement update
2023-05-16 00:00:00
almalinux
almalinux
Moderate: grafana security update
2023-05-16 00:00:00
Moderate: grafana security and enhancement update
2023-05-09 00:00:00
Moderate: Image Builder security, bug fix, and enhancement update
2023-05-09 00:00:00
redhat
redhat
(RHSA-2023:2784) Moderate: grafana security update
2023-05-16 05:54:36
(RHSA-2023:2167) Moderate: grafana security and enhancement update
2023-05-09 05:02:10
(RHSA-2023:0708) Moderate: Release of OpenShift Serverless Client kn 1.27.0
2023-02-09 09:22:38
oraclelinux
oraclelinux
grafana security and enhancement update
2023-05-15 00:00:00
Image Builder security, bug fix, and enhancement update
2023-05-24 00:00:00
Image Builder security, bug fix, and enhancement update
2023-05-15 00:00:00
ibm
ibm
suse
suse
Security update for go1.18 (important)
2022-10-20 00:00:00
Security update for go1.19 (important)
2022-10-20 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.7-alt1
2022-10-18 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: golang-1.19.2-1.fc37
2022-10-17 22:55:43
rocky
rocky
go-toolset:rhel8 security and bug fix update
2023-01-25 08:59:15
go-toolset and golang security and bug fix update
2023-01-23 14:30:17
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3668-1)
2022-10-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3669-1)
2022-10-20 00:00:00
Fedora: Security Advisory for golang (FEDORA-2022-59a20edab2)
2022-10-18 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-10-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0273
2022-11-02 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0273
2022-11-02 00:00:00
veracode
veracode
Authentication Bypass
2022-10-17 08:35:54
Denial Of Service (DoS)
2022-10-14 04:05:34
Denial Of Service (DoS)
2022-09-07 08:33:55
github
github
Grafana when using email as a username can block other users from signing in
2024-05-14 22:29:38
mageia
mageia
Updated golang packages fix security vulnerability
2022-10-19 02:14:56
alpinelinux
alpinelinux
cnvd
cnvd
Grafana Denial of Service Vulnerability
2022-10-14 00:00:00
cvelist
cvelist
cgr
cgr
CVE-2022-39229 vulnerabilities
2024-05-19 03:07:16
prion
prion
Design/Logic Flaw
2022-10-13 23:15:00
Memory corruption
2022-10-14 15:16:00
cve
cve
redhatcve
redhatcve
ubuntucve
ubuntucve
CVE-2022-39229
2022-10-13 00:00:00
CVE-2022-41715
2022-10-14 00:00:00
nvd
nvd
CVE-2022-39229
2022-10-13 23:15:10
CVE-2022-41715
2022-10-14 15:16:20
cbl_mariner
cbl_mariner
CVE-2022-2880 affecting package golang for versions less than 1.19.10-1
2024-02-25 03:00:06
CVE-2022-41715 affecting package golang for versions less than 1.19.5-1
2024-02-25 03:00:06
CVE-2022-27664 affecting package kured for versions less than 1.13.2-1
2023-11-15 20:12:47
debiancve
debiancve
wolfi
wolfi
CVE-2022-27664 vulnerabilities
2024-09-30 03:53:08
gitlab
gitlab
golang.org/x/net/http2 Denial of Service vulnerability
2022-09-07 00:00:00