SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-511

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-511

Recommended update for grafana

Type: recommended

Severity: moderate

Issued: 2024-02-15

Description:

This update for grafana fixes the following issues:

- Fixed changelog entries for the Bugzilla trackers related to previously implemented security fixes 
  (no source code changes)

References

jira: MSQA-719 https://jira.suse.com/browse/MSQA-719
CVE: CVE-2022-0155
CVE: CVE-2021-43138
CVE: CVE-2021-3918
CVE: CVE-2021-3807
CVE: CVE-2020-7753
Bugzilla: 1218844 VUL-0: CVE-2022-0155: grafana: follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor
Bugzilla: 1218843 VUL-0: CVE-2020-7753: grafana: nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function
Bugzilla: 1200480 VUL-0: CVE-2021-43138: spacewalk-web: a malicious user can obtain privileges via the mapValues() method
Bugzilla: 1192696 VUL-0: CVE-2021-3918: nodejs14, nodejs10, nodejs12, nodejs8: json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Bugzilla: 1192154 VUL-0: CVE-2021-3807: nodejs12,nodejs4,nodejs6,nodejs8,nodejs10,nodejs14: node-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

Packages

grafana-9.5.8-150200.3.53.2