Description
Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP which provides a login name to take over the account of another user in that Grafana instance. This can occur when the malicious user is authorized to log in to Grafana via OAuth, the malicious user's external user id is not already associated with an account in Grafana, the malicious user's email address is not already associated with an account in Grafana, and the malicious user knows the Grafana username of the target user. If these conditions are met, the malicious user can set their username in the OAuth provider to that of the target user, then go through the OAuth flow to log in to Grafana. Due to the way that external and internal user accounts are linked together during login, if the conditions above are all met then the malicious user will be able to log in to the target user's Grafana account. Versions 9.0.3, 8.5.9, 8.4.10, and 8.3.10 contain a patch for this issue. As a workaround, concerned users can disable OAuth login to their Grafana instance, or ensure that all users authorized to log in via OAuth have a corresponding user account in Grafana linked to their email address.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| grafana | grafana | >= 5.3, < 8.3.10, >= 8.4.0, < 8.4.10, >= 8.5.0, < 8.5.9, >= 9.0.0, < 9.0.3 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | grafana | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | grafana | 7.5.11-5.el9_0 | RHSA-2022:5716 |
| RHEL 8 | grafana | 7.5.11-3.el8_6 | RHSA-2022:5717 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.4 EUS | grafana | 7.3.6-5.el8_4 | RHSA-2022:5718 |
| RHEL 8.2 EUS | grafana +12 | 6.3.6-5.el8_2 | RHSA-2022:5719 |
| RHEL 8.1 E4S | grafana +12 | 6.2.2-9.el8_1 | RHSA-2022:5720 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | grafana | 7.5.11-5.el9_0 | ALSA-2022:5716 |
| AlmaLinux 8 | grafana | 7.5.11-3.el8_6 | ALSA-2022:5717 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | grafana | 7.5.11-5.el9_0 | RLSA-2022:5716 |
| Rocky Linux 8 | grafana | 7.5.11-3.el8_6 | RLSA-2022:5717 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| SLES 15 SP4 | grafana | 8.3.10-150200.3.26.1 | SUSE-SU-2023:2575-1, SUSE-SU-2022:4428-1, SUSE-SU-2022:3765-1 |
| SLES 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES 15 | golang-github-prometheus-node_exporter | 1.3.0-150000.3.18.1 | SUSE-SU-2022:3751-1 |
Show 23 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SLES 12 SP4 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SLES 12 SP3 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SLES for SAP 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES for SAP 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES for SAP 15 | golang-github-prometheus-node_exporter | 1.3.0-150000.3.18.1 | SUSE-SU-2022:3751-1 |
| SLES for SAP 12 SP5 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SLES for SAP 12 SP4 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SLE HPC 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLE HPC 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLE HPC 15 | golang-github-prometheus-node_exporter | 1.3.0-150000.3.18.1 | SUSE-SU-2022:3751-1 |
| SUSE OpenStack Cloud Crowbar 9 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SUSE OpenStack Cloud 9 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2022:3747-1 |
| SUSE Manager Server Module 4.3 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2022:3751-1 |
| SUSE Manager Server Module 4.2 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2022:3751-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-boynux-squid_exporter | 1.6-150000.1.9.1 | SUSE-SU-2022:4437-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2022:3751-1 |
| SUSE Manager Proxy Module 4.3 | prometheus-blackbox_exporter | 0.19.0-150000.1.14.3 | SUSE-SU-2022:4437-1 |
| SUSE Manager Proxy Module 4.3 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Proxy Module 4.2 | golang-github-boynux-squid_exporter | 1.6-150000.1.9.1 | SUSE-SU-2022:4437-1 |
| SUSE Manager Proxy Module 4.2 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2022:3751-1 |
| SUSE Manager Proxy Module 4.2 | prometheus-blackbox_exporter | 0.19.0-150000.1.14.3 | SUSE-SU-2022:4437-1 |
| SUSE Manager Proxy Module 4.2 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1665997480.587fa10-150000.1.41.1 | SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools for SLE Micro 5 | prometheus-blackbox_exporter | 0.19.0-150000.1.14.3 | SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.7-150000.1.9.3 | SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | dracut-saltboot | 0.1.1681904360.84ef141-159000.3.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-QubitProducts-exporter_exporter | 0.4.0-159000.4.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | prometheus-blackbox_exporter | 0.24.0-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-proxy-systemd-services | 5.0.1-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1661440542.6cbe0da-150000.1.38.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools 15 | golang-github-QubitProducts-exporter_exporter | 0.4.0-159000.4.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-boynux-squid_exporter | 1.6-150000.1.9.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools 15 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2024:0196-1, SUSE-SU-2022:3751-1 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-prometheus | 2.45.0-159000.6.33.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | grafana | 8.3.10-150000.1.33.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.6-150000.1.38.1 | SUSE-SU-2023:2578-1, SUSE-SU-2022:3751-1 |
| SUSE Manager Client Tools 15 | mgr-push | 5.0.1-159000.4.21.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | prometheus-blackbox_exporter | 0.19.0-150000.1.14.3 | SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools 15 | prometheus-postgres_exporter | 0.10.1-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | python-hwdata | 2.3.5-159000.5.13.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | python-pyvmomi | 6.7.3-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | rhnlib | 5.0.1-159000.6.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.15-150000.3.86.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.3.12-150000.3.68.2 | SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:3751-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-salt | 1.2.2-159000.5.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-susemanager-client | 5.0.1-159000.6.15.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.6-150000.1.27.2 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1, SUSE-SU-2022:3751-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.7-150000.1.9.3 | SUSE-SU-2024:0196-1, SUSE-SU-2022:4437-1 |
| SUSE Manager Client Tools 15 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 12 | golang-github-QubitProducts-exporter_exporter | 0.4.0-4.6.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-boynux-squid_exporter | 1.6-1.9.1 | SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1 |
| SUSE Manager Client Tools 12 | golang-github-lusitaniae-apache_exporter | 0.11.0-1.13.1 | SUSE-SU-2024:0191-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-alertmanager | 0.23.0-1.15.2 | SUSE-SU-2024:0191-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-node_exporter | 1.3.0-1.21.1 | SUSE-SU-2024:0191-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-prometheus | 2.45.0-4.33.3 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-promu | 0.14.0-4.12.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | grafana | 8.3.10-1.33.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:2579-1, SUSE-SU-2022:4439-1 |
| SUSE Manager Client Tools 12 | kiwi-desc-saltboot | 0.1.1661440542.6cbe0da-1.29.1 | SUSE-SU-2024:0191-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | mgr-daemon | 4.3.6-1.38.1 | SUSE-SU-2023:2579-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | mgr-push | 5.0.1-4.21.4 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | prometheus-blackbox_exporter | 0.19.0-1.14.1 | SUSE-SU-2024:0191-1, SUSE-SU-2022:4439-1 |
| SUSE Manager Client Tools 12 | prometheus-postgres_exporter | 0.10.1-3.6.4 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | python-hwdata | 2.3.5-15.12.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | rhnlib | 5.0.1-24.30.3 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | spacecmd | 4.3.15-38.109.1 | SUSE-SU-2024:0191-1, SUSE-SU-2023:2579-1, SUSE-SU-2022:4439-1 |
| SUSE Manager Client Tools 12 | spacewalk-client-tools | 4.3.12-52.77.1 | SUSE-SU-2022:4439-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | supportutils-plugin-salt | 1.2.2-9.9.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | supportutils-plugin-susemanager-client | 5.0.1-9.15.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | system-user-grafana +1 | 1.0.0-3.7.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | uyuni-common-libs | 4.3.6-1.27.1 | SUSE-SU-2024:0191-1, SUSE-SU-2023:2579-1, SUSE-SU-2022:3747-1 |
| SUSE Manager Client Tools 12 | zypp-plugin-spacewalk | 1.0.14-30.42.1 | SUSE-SU-2023:2579-1 |
| SUSE Enterprise Storage 7 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE Enterprise Storage 6 | grafana | 8.5.13-150100.3.12.1 | SUSE-SU-2022:3676-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | grafana | 8.3.10-1.1 | openSUSE-SU-2024:12260-1 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.5 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| openSUSE Leap 15.5 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.5 | wire | 0.5.0-150000.1.12.3 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | dracut-saltboot | 0.1.1661440542.6cbe0da-150000.1.38.1 | SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:3751-1 |
| openSUSE Leap 15.4 | golang-github-boynux-squid_exporter | 1.6-150000.1.9.1 | SUSE-SU-2022:4437-1 |
| openSUSE Leap 15.4 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2022:3751-1 |
| openSUSE Leap 15.4 | golang-github-prometheus-promu | 0.13.0-150000.3.9.1 | SUSE-SU-2022:4437-1 |
| openSUSE Leap 15.4 | grafana | 8.3.10-150200.3.26.1 | SUSE-SU-2023:2575-1, SUSE-SU-2022:4428-1, SUSE-SU-2022:3765-1 |
| openSUSE Leap 15.4 | prometheus-blackbox_exporter | 0.19.0-150000.1.14.3 | SUSE-SU-2022:4437-1 |
| openSUSE Leap 15.4 | spacecmd | 4.3.15-150000.3.86.1 | SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1, SUSE-SU-2022:3751-1 |
| openSUSE Leap 15.4 | wire | 0.5.0-150000.1.9.3 | SUSE-SU-2023:2578-1, SUSE-SU-2022:4437-1 |
| openSUSE Leap 15.3 | dracut-saltboot | 0.1.1661440542.6cbe0da-150000.1.38.1 | SUSE-SU-2022:4437-1, SUSE-SU-2022:3751-1 |
| openSUSE Leap 15.3 | golang-github-boynux-squid_exporter | 1.6-150000.1.9.1 | SUSE-SU-2022:4437-1 |
| openSUSE Leap 15.3 | golang-github-lusitaniae-apache_exporter | 0.11.0-150000.1.12.1 | SUSE-SU-2022:3751-1 |
| openSUSE Leap 15.3 | golang-github-prometheus-promu | 0.13.0-150000.3.9.1 | SUSE-SU-2022:4437-1 |
| openSUSE Leap 15.3 | grafana | 8.3.10-150200.3.26.1 | SUSE-SU-2022:4428-1, SUSE-SU-2022:3765-1 |
| openSUSE Leap 15.3 | spacecmd | 4.3.15-150000.3.86.1 | SUSE-SU-2022:4437-1, SUSE-SU-2022:3751-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | grafana | 9.0.3-r0 | — |
| Alpine v3.23 | grafana | 9.0.3-r0 | — |
| Alpine v3.22 | grafana | 9.0.3-r0 | — |
| Alpine v3.21 | grafana | 9.0.3-r0 | — |
| Alpine v3.20 | grafana | 9.0.3-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | grafana | 9.0.3-r0 | — |
| Alpine v3.18 | grafana | 9.0.3-r0 | — |
| Alpine v3.17 | grafana | 9.0.3-r0 | — |
| Alpine v3.16 | grafana | 8.5.9-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | grafana | 7.5.11-5.el9_0 | ELSA-2022-5716 |
| Oracle Linux 8 | grafana | 7.5.11-3.el8_6 | ELSA-2022-5717 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/grafana/grafana | >= 5.3.0-beta1, < 8.3.10 | 8.3.10 | GHSA-mx47-6497-3fv2 |
| Go | github.com/grafana/grafana | >= 8.4.0, < 8.4.10 | 8.4.10 | GHSA-mx47-6497-3fv2 |
| Go | github.com/grafana/grafana | >= 8.5.0, < 8.5.9 | 8.5.9 | GHSA-mx47-6497-3fv2 |
| Go | github.com/grafana/grafana | >= 9.0.0, < 9.0.3 | 9.0.3 | GHSA-mx47-6497-3fv2 |
| Go | github.com/grafana/grafana | all versions | — | GO-2024-2852 |
Advisories 26
- ALSA-2022:5716 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:5717 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2022:5719 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2022:5720 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2022:5718 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2022:5716 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2022:5717 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RLSA-2022:5717 Important: grafana security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2022:5716 Important: grafana security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2022:3676-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:4439-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3765-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0191-1 Security Beta update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2575-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12260-1 grafana-8.3.10-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3747-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2579-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:4437-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:4428-1 Security update for grafana SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3751-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2578-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0196-1 Security Beta update for SUSE Manager Client Tools and Salt SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-0696 Grafana: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 23, 2024
- WID-SEC-2022-1582 GitLab: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Dec 12, 2022
- ELSA-2022-5717 Important: grafana security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 27, 2022
- ELSA-2022-5716 Important: grafana security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 26, 2022
References
- https://grafana.com/docs/grafana/next/release-notes/release-notes-8-4-10/
- https://github.com/grafana/grafana/security/advisories/GHSA-mx47-6497-3fv2
- https://grafana.com/docs/grafana/next/release-notes/release-notes-8-5-9/
- https://grafana.com/docs/grafana/next/release-notes/release-notes-9-0-3/
- https://security.netapp.com/advisory/ntap-20220901-0010/