Security update for grafana
Discription

image
This update for grafana fixes the following issues: grafana was updated from version 9.5.18 to 10.4.13 (jsc#PED-11591,jsc#PED-11649): Security issues fixed: CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/x/crypto (bsc#1234554) CVE-2023-3128: Fixed authentication bypass using Azure AD OAuth (bsc#1212641) CVE-2023-6152: Add email verification when updating user email (bsc#1219912) CVE-2024-6837: Fixed potential data source permission escalation (bsc#1236301) CVE-2024-8118: Fixed permission on external alerting rule write endpoint (bsc#1231024) Potential breaking changes in version 10: In panels using the extract fields transformation, where one of the extracted names collides with one of the already existing ields, the extracted field will be renamed. For the existing backend mode users who have table visualization might see some inconsistencies on their panels. We have updated the table column naming. This will potentially affect field transformations and/or field overrides. To resolve this either: update transformation or field override. For the existing backend mode users who have Transformations with the time field, might see their transformations are not working. Those panels that have broken transformations will fail to render. This is because we changed the field key. To resolve this either: Remove the affected panel and re-create it; Select the Time field…Read More

Back to Main

Subscribe for the latest news: