Red Hat Product Errata RHSA-2022:5720 - Security Advisory
Issued:
2022-07-26
Updated:
2022-07-26

RHSA-2022:5720 - Security Advisory

Synopsis

Important: grafana security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for grafana is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

Description

Grafana is an open source, feature rich metrics dashboard and graph editor for
Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • grafana: OAuth account takeover (CVE-2022-31107)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.1 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.1 x86_64

Fixes

  • BZ - 2104367 - CVE-2022-31107 grafana: OAuth account takeover

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.1

SRPM
grafana-6.2.2-9.el8_1.src.rpm SHA-256: cb1131df41be642f3cd6f03e9111a0327c0be185bf38cd359341012bc23c0078
ppc64le
grafana-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 64fca9d007369f3df2c451474c84bc0611d6475642358e1c5279cb8de825c33b
grafana-azure-monitor-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 3871773bc7664fe1a15e9e8bb7e918383d1719e00e064f73bb9d36629d5c8a57
grafana-cloudwatch-6.2.2-9.el8_1.ppc64le.rpm SHA-256: e04fa568a035944776022aa7dedc8327234d4865c0259928c6676ce15bac637d
grafana-debuginfo-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 0546cbb5339c679cc43856ab7062d2adc814e901beede699aa6545ec511341b8
grafana-elasticsearch-6.2.2-9.el8_1.ppc64le.rpm SHA-256: f8fa18298d9db7d1e7cf3d8998fe90105c468a919f66730eb236fd51304c8127
grafana-graphite-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 578c36055974f6cc8846df6396ce5a70a8430aabadd748c718d12241911c2a0c
grafana-influxdb-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 48a4fc1608c1891ee0f73eb16c3d2bf58fd5efbd3e8b425b3e34b12fabc8736d
grafana-loki-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 3c988eae57edcc099c51f49928ebec85787baf5b9a782a9fed0ed6192d3f9ea1
grafana-mssql-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 8a3547d80afd3649b6efc1ad82c952af7bd62f08be05af05661cecaf1f99ca76
grafana-mysql-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 9c377b8d2719f6a246c7e4ea1a805070f37f3efccfb33b7ae18d6616507e63e5
grafana-opentsdb-6.2.2-9.el8_1.ppc64le.rpm SHA-256: 9af2b15a734a99ae8fd70f844de7b7a468d4a404d491d012ad27f13e33bf6bee
grafana-postgres-6.2.2-9.el8_1.ppc64le.rpm SHA-256: a1807f3ae19d92e8c59a9ea05621dcc9b09aed66ef3e2d20b89c2b1625992154
grafana-prometheus-6.2.2-9.el8_1.ppc64le.rpm SHA-256: d87b5a69b4a3822965f68af3b89d16bd92f45bea015e99bcea5548970e85fa87
grafana-stackdriver-6.2.2-9.el8_1.ppc64le.rpm SHA-256: aff86a257af514d5756598636270a52031d26048c4dd482eedaf404249f9d958

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.1

SRPM
grafana-6.2.2-9.el8_1.src.rpm SHA-256: cb1131df41be642f3cd6f03e9111a0327c0be185bf38cd359341012bc23c0078
x86_64
grafana-6.2.2-9.el8_1.x86_64.rpm SHA-256: 135ee8123bedea02dee20364448ef8cedf910570691494912227cbaa94a190af
grafana-azure-monitor-6.2.2-9.el8_1.x86_64.rpm SHA-256: 84810474f1c4935899cbb1cf06314df3abb7735903bef1dd00a4a9203b2c3a88
grafana-cloudwatch-6.2.2-9.el8_1.x86_64.rpm SHA-256: 1782e0278efa44b93a0b70e19dfc8beeb0cb0bfb145419285f62648e5d9b268c
grafana-debuginfo-6.2.2-9.el8_1.x86_64.rpm SHA-256: dd3932729659b4bc9d4728f92565b1602d3ad301a62e3b521434f5ed61920bd1
grafana-elasticsearch-6.2.2-9.el8_1.x86_64.rpm SHA-256: bb9e48d545b7d6484764f0ae94c5eecd96e34583e66d36ff5a4920907c23fe5a
grafana-graphite-6.2.2-9.el8_1.x86_64.rpm SHA-256: c30a545757b90dc3c297304cd57e8668d649a13443289a11248973bec00e4a3a
grafana-influxdb-6.2.2-9.el8_1.x86_64.rpm SHA-256: ef5330287f7e7f7618f3c87cc221063b2fdf51f0bcc691e5aa3c3afe9448eded
grafana-loki-6.2.2-9.el8_1.x86_64.rpm SHA-256: 2310fa57904c3eee1270d389c003a3d8c01c6bc65bc5167be3cf5e9802ed7460
grafana-mssql-6.2.2-9.el8_1.x86_64.rpm SHA-256: 0a3dc552cb8c3d90ab9b7e1f4ecd305a1ada45267d03f8ad0a18822952045731
grafana-mysql-6.2.2-9.el8_1.x86_64.rpm SHA-256: 1eaf5a08ae1f32002864fb04ce21078e3fa3b2a032c3f5eba6e4c738a6ebfa20
grafana-opentsdb-6.2.2-9.el8_1.x86_64.rpm SHA-256: 156add159f5afc2f899d6f160442c37bd0b14609789242a10d18a248bbfb4448
grafana-postgres-6.2.2-9.el8_1.x86_64.rpm SHA-256: 99909840bca69e2affb52a9d6bc80635f68e2c5d8af742da4a43102b2c3924a9
grafana-prometheus-6.2.2-9.el8_1.x86_64.rpm SHA-256: fc578c8720f220e10776799afdcc773eefe9253e5a4727815f4903884a69701a
grafana-stackdriver-6.2.2-9.el8_1.x86_64.rpm SHA-256: 2b263dbb7c3d35239773cfb33b0a4dd0e50430a7374ae4f48c6ed128b9d3d64c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.