Issued:: 2021-10-12
Updated:: 2021-10-12

RHSA-2021:3771 - Security Advisory

Overview
Updated Packages

Synopsis

Important: grafana security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for grafana is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

grafana: Snapshot authentication bypass (CVE-2021-39226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 2011063 - CVE-2021-39226 grafana: Snapshot authentication bypass

CVEs

CVE-2021-39226

References

https://access.redhat.com/security/updates/classification/#important

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
s390x
grafana-7.3.6-3.el8_4.s390x.rpm	SHA-256: b608fdc29881b01620f1148dafe6f1a7dbafc177d98be3a679d4aae58eed8a96
grafana-debuginfo-7.3.6-3.el8_4.s390x.rpm	SHA-256: 1780b2490beb444bd91df73d06d715b27f9ee236017b606572ce20fa7128bc32

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
s390x
grafana-7.3.6-3.el8_4.s390x.rpm	SHA-256: b608fdc29881b01620f1148dafe6f1a7dbafc177d98be3a679d4aae58eed8a96
grafana-debuginfo-7.3.6-3.el8_4.s390x.rpm	SHA-256: 1780b2490beb444bd91df73d06d715b27f9ee236017b606572ce20fa7128bc32

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
s390x
grafana-7.3.6-3.el8_4.s390x.rpm	SHA-256: b608fdc29881b01620f1148dafe6f1a7dbafc177d98be3a679d4aae58eed8a96
grafana-debuginfo-7.3.6-3.el8_4.s390x.rpm	SHA-256: 1780b2490beb444bd91df73d06d715b27f9ee236017b606572ce20fa7128bc32

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
s390x
grafana-7.3.6-3.el8_4.s390x.rpm	SHA-256: b608fdc29881b01620f1148dafe6f1a7dbafc177d98be3a679d4aae58eed8a96
grafana-debuginfo-7.3.6-3.el8_4.s390x.rpm	SHA-256: 1780b2490beb444bd91df73d06d715b27f9ee236017b606572ce20fa7128bc32

Red Hat Enterprise Linux for Power, little endian 8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux Server - TUS 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for ARM 64 8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
aarch64
grafana-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 9841e8fdff65316015f8d9072fcbd231110325451684fbdc7d45f4085c2aafdd
grafana-debuginfo-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 5bd2638e2912a7aee4ff0cca8f7e6eb30ae906a50c8f372cc8d3aa4c1c94e77f

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
aarch64
grafana-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 9841e8fdff65316015f8d9072fcbd231110325451684fbdc7d45f4085c2aafdd
grafana-debuginfo-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 5bd2638e2912a7aee4ff0cca8f7e6eb30ae906a50c8f372cc8d3aa4c1c94e77f

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
aarch64
grafana-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 9841e8fdff65316015f8d9072fcbd231110325451684fbdc7d45f4085c2aafdd
grafana-debuginfo-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 5bd2638e2912a7aee4ff0cca8f7e6eb30ae906a50c8f372cc8d3aa4c1c94e77f

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
aarch64
grafana-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 9841e8fdff65316015f8d9072fcbd231110325451684fbdc7d45f4085c2aafdd
grafana-debuginfo-7.3.6-3.el8_4.aarch64.rpm	SHA-256: 5bd2638e2912a7aee4ff0cca8f7e6eb30ae906a50c8f372cc8d3aa4c1c94e77f

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
ppc64le
grafana-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 795f642639824d5e536d5a4efa249e4827bd8c113f42173ad3a322073f4abe23
grafana-debuginfo-7.3.6-3.el8_4.ppc64le.rpm	SHA-256: 90ebeea74996eb8c1d806587148ec5ba411cde1b8a9ba355c277d51bcb286ca4

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4

SRPM
grafana-7.3.6-3.el8_4.src.rpm	SHA-256: 5d0d35b807bda0f8269919207b17ca509346fa7aa0b775a2440240d5b4d11cee
x86_64
grafana-7.3.6-3.el8_4.x86_64.rpm	SHA-256: 66337b7cffd0df4fef1db0237632e93df1e86f0d8863d21671f6e07d304cacf9
grafana-debuginfo-7.3.6-3.el8_4.x86_64.rpm	SHA-256: f25fc61c22d7e0ac26cb6eed94f8d81bdf07393ee7f60e8db2ce362f43c9bc66

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.