OPENSUSE-SU-2020:1611-1
Vulnerability Summary
Timeline
Description
Security update for grafana This update for grafana fixes the following issues: grafana was updated to version 7.1.5: * Features / Enhancements - Stats: Stop counting the same user multiple times. - Field overrides: Filter by field name using regex. - AzureMonitor: map more units. - Explore: Don't run queries on datasource change. - Graph: Support setting field unit & override data source (automatic) unit. - Explore: Unification of logs/metrics/traces user interface - Table: JSON Cell should try to convert strings to JSON - Variables: enables cancel for slow query variables queries. - TimeZone: unify the time zone pickers to one that can rule them all. - Search: support URL query params. - Grafana-UI: Add FileUpload. - TablePanel: Sort numbers correctly. * Bug fixes - Alerting: remove LongToWide call in alerting. - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used. - Variables: Fixes issue with All variable not being resolved. - Templating: Fixes so texts show in picker not the values. - Templating: Templating: Fix undefined result when using raw interpolation format - TextPanel: Fix content overflowing panel boundaries. - StatPanel: Fix stat panel display name not showing when explicitly set. - Query history: Fix search filtering if null value. - Flux: Ensure connections to InfluxDB are closed. - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything). - Prometheus: Fix prom links in mixed mode. - Sign In Use correct url for the Sign In button. - StatPanel: Fixes issue with name showing for single series / field results - BarGauge: Fix space bug in single series mode. - Auth: Fix POST request failures with anonymous access - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable - Templating: Fixed recursive queries triggered when switching dashboard settings view - GraphPanel: Fix annotations overflowing panels. - Prometheus: Fix performance issue in processing of histogram labels. - Datasources: Handle URL parsing error. - Security: Use Header.Set and Header.Del for X-Grafana-User header.
Affected Systems
- suse•grafana&distro=SUSE Package Hub 15 SP1
< 7.1.5-bp151.2.1
References (9)
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OKBMAHAY4QQ74KBHCRT4WZCTDLSNZWWW/
- https://bugzilla.suse.com/1044444
- https://bugzilla.suse.com/1044933
- https://bugzilla.suse.com/1115960
- https://bugzilla.suse.com/1170557
- https://www.suse.com/security/cve/CVE-2018-19039
- https://www.suse.com/security/cve/CVE-2019-15043
- https://www.suse.com/security/cve/CVE-2020-12245
- https://www.suse.com/security/cve/CVE-2020-13379